Vulnslist

Cisco Intrusion Prevention System IP Logging Denial of Service Vulnerability

Cisco-SA-20141014-CVE-2014-3406 · Medium · Published 11 years ago · Updated 11 years ago

A vulnerability in the IP logging feature of Cisco Intrusion Prevention System (IPS) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system. The vulnerability is due to a race condition when writing the IP logging file. An attacker could exploit this vulnerability by sending traffic through the sensor that would hit the rule configured with the IP logging feature. Cisco has confirmed the vulnerability in a security notice and released software updates. To exploit this vulnerability, the IP logging feature must be configured on a targeted device, and the attacker may need to acquire additional information about whether this feature is enabled. In addition, the attacker may need access to trusted, internal networks in which the targeted device may reside to send traffic to hit the rule configured with the IP logging feature. Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.

Cisco advisory · CSAF JSON

Workarounds

Related Products