CVE-2014-2103

Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a denial of service (MainApp process outage) via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309.

CVSS v2.0 6.8 MEDIUM

6.8^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:N/I:N/A:C

Exploitability : 8.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2103	Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2103	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:cisco:intrusion_prevention_system:5.1:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:6.0:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:6.0.2.0:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:7.0:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(1\)e3:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(2\)e3:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(2\)e4:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(3\)e4:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(4\)e4:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(5a\)e4:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(6\)e4:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(7\)e4:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(8\)e4:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(9\)e4:::::::*
	cpe:2.3:a:cisco:intrusion_prevention_system:7.1:::::::*
	cpe:2.3:h:cisco:intrusion_prevention_system::::::::

History

21 Nov 2024, 02:05

Type	Values Removed	Values Added
References	~~() http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2103 - Vendor Advisory~~	() http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2103 - Vendor Advisory

Information

Published : 2014-02-27 20:55

Updated : 2024-11-21 02:05

NVD link : CVE-2014-2103

Mitre link : CVE-2014-2103

CVE.ORG link : CVE-2014-2103

JSON object : View

Products Affected

cisco

intrusion_prevention_system

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2014-2103", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-02-27T20:55:06.957", "references": [{"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2103", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2103", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a denial of service (MainApp process outage) via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309."}, {"lang": "es", "value": "Cisco Intrusion Prevention System (IPS) Software permite a atacantes remotos causar una denegaci\u00f3n de servicio (interrupci\u00f3n del proceso MainApp) a trav\u00e9s de paquetes SNMP malformados, tambi\u00e9n conocido como Bug IDs CSCum52355 y CSCul49309."}], "lastModified": "2024-11-21T02:05:39.637", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D846D9B7-CB24-40C6-B7A4-2ABFF0D43442"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B010D14A-7275-454B-B2F8-31EE0D34C24F"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:6.0.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5853BC19-384F-423B-B376-D001B8AA099C"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03105E7F-12F8-4497-8A27-BD2F1653FD38"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(1\\)e3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32F57CD3-EA32-4814-A021-3CEB23900E18"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(2\\)e3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDCEF522-431E-49D3-84F8-24EBE0D03E0B"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(2\\)e4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5961030A-ADD4-4BA6-A691-275DE6D9E1B2"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(3\\)e4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21F422BC-E40B-4EC6-B0A5-7CD3A3C92B4A"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(4\\)e4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "04BA1FCB-DF1B-42E5-BBF3-808119AF80ED"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(5a\\)e4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6074CC8-4A49-4A31-809F-B87E4B80D179"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(6\\)e4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20548D0B-8B3C-468F-8966-13019C4D69C6"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(7\\)e4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3206DA6-FE23-4214-A1F8-3C212C2768BB"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(8\\)e4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C07BDE6-25D7-49D5-AEAD-6BE3D1F5F171"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.0\\(9\\)e4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5887C44-EEA8-4AB8-9136-790D1E8C8B45"}, {"criteria": "cpe:2.3:a:cisco:intrusion_prevention_system:7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F03BDC3C-E7F1-41C1-B89C-1DB1D3997DC2"}, {"criteria": "cpe:2.3:h:cisco:intrusion_prevention_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7D9E05D-DF28-4BC3-A54E-9F0682197939"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}