CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2017-3842
https://notcve.org/view.php?id=CVE-2017-3842
22 Feb 2017 — A vulnerability in the web-based management interface of the Cisco Intrusion Prevention System Device Manager (IDM) could allow an unauthenticated, remote attacker to view sensitive information stored in certain HTML comments. More Information: CSCuh91455. Known Affected Releases: 7.2(1)V7. Una vulnerabilidad en la interfaz de gestión basada en web de Cisco Intrusion Prevention System Device Manager (IDM) podría permitir a un atacante remoto no autenticado visualizar información sensible almacenada en ciert... • http://www.securityfocus.com/bid/96256 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.1EPSS: 0%CPEs: 3EXPL: 0CVE-2015-0654
https://notcve.org/view.php?id=CVE-2015-0654
13 Mar 2015 — Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7.3(3)E4 allows remote attackers to cause a denial of service (process hang) by establishing many HTTPS sessions, aka Bug ID CSCuq40652. Condición de carrera en la implementación TLS en MainApp en la interfaz de gestión en Cisco Intrusion Prevention System (IPS) Software anterior a 7.3(3)E4 permite a atacantes remotos causar una denegación de servicio (cuelgue del proces... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-ips • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2014-3406
https://notcve.org/view.php?id=CVE-2014-3406
19 Oct 2014 — Race condition in the IP logging feature in Cisco Intrusion Prevention System (IPS) Software 7.1(7)E4 and earlier allows remote attackers to cause a denial of service (device reload) via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085. Condición de carrera en la caracteristica de registración de IIP en Cisco Intrusion Prevention System (IPS) Software 7.1(7)E4 y anteriores permite a atacantes remotos causar una denegación de servicio (recarga de dispositivo) a través de trafico IP m... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3406 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 7.5EPSS: 0%CPEs: 10EXPL: 0CVE-2014-3402
https://notcve.org/view.php?id=CVE-2014-3402
10 Oct 2014 — The authentication-manager process in the web framework in Cisco Intrusion Prevention System (IPS) 7.0(8)E4 and earlier in Cisco Intrusion Detection System (IDS) does not properly manage user tokens, which allows remote attackers to cause a denial of service (temporary MainApp hang) via a crafted connection request to the management interface, aka Bug ID CSCuq39550. El proceso de gestión de autenticación en el Framework web en Cisco Intrusion Prevention System (IPS) 7.0(8)E4 y anteriiores en Cisco Intrusion... • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3402 • CWE-287: Improper Authentication •
CVSS: 7.5EPSS: 0%CPEs: 16EXPL: 0CVE-2014-2103
https://notcve.org/view.php?id=CVE-2014-2103
27 Feb 2014 — Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a denial of service (MainApp process outage) via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309. Cisco Intrusion Prevention System (IPS) Software permite a atacantes remotos causar una denegación de servicio (interrupción del proceso MainApp) a través de paquetes SNMP malformados, también conocido como Bug IDs CSCum52355 y CSCul49309. • http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2103 • CWE-20: Improper Input Validation •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0CVE-2013-5497
https://notcve.org/view.php?id=CVE-2013-5497
19 Sep 2013 — The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens, which allows remote attackers to cause a denial of service (intermittent MainApp hang) via a crafted management-interface connection request, aka Bug ID CSCuf20148. El proceso gestor de autenticación en el framework web en Cisco Intrusion Prevention System (IPS) no maneja adecuadamente tokens de usuario, lo que permite a atacantes remotos provocar una denegación de servici... • http://osvdb.org/97525 • CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 0%CPEs: 11EXPL: 0CVE-2013-3410
https://notcve.org/view.php?id=CVE-2013-3410
18 Jul 2013 — Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger incorrect memory allocation, aka Bug ID CSCua61977. Cisco Intrusion Prevention System (IPS) Software en dispositivos IPS NME anterior a v7.0(9)E4 permite a atacantes remotos causar una denegación de servicio (reinicio del dispositivo) mediante paquetes IPv4 malformados que lanzan una incorrecta asignación de memoria, ... • http://secunia.com/advisories/54243 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2013-3411
https://notcve.org/view.php?id=CVE-2013-3411
18 Jul 2013 — The IDSM-2 drivers in Cisco Intrusion Prevention System (IPS) Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service (device hang) via malformed IPv4 TCP packets, aka Bug ID CSCuh27460. Los drivers IDSM-2 en Cisco Intrusion Prevention System (IPS) Software en Cisco Catalyst 6500 con el módulo IDSM-2 module permite a atacantes remotos provocar una denegación de servicio (cuelgue del dispositivo) a través de paquetes TCP IPv4 malformados, también cono... • http://secunia.com/advisories/54242 •
CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0CVE-2013-1218
https://notcve.org/view.php?id=CVE-2013-1218
18 Jul 2013 — Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device reload) via fragmented (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCue51272. Cisco Intrusion Prevention System (IPS) Software en ASA 5500-X IPS-SSP anterior a v7.1(7)sp1E4 permite a atacantes remotos causar una denegación de servicio (cuelgue del proceso Analysis Engine o reinicio del dispositivo) mediante paque... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0CVE-2013-1243
https://notcve.org/view.php?id=CVE-2013-1243
18 Jul 2013 — The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules before 7.1(5)E4, IPS 4500 sensors before 7.1(6)E4, and IPS 4300 sensors before 7.1(5)E4 allows remote attackers to cause a denial of service (MainApp process hang) via malformed IPv4 packets, aka Bug ID CSCtx18596. La pila IP en Cisco Intrusion Prevention System (IPS) Software en ASA 5500-X IPS-SSP y módulos hardware anterior a v7.1(5)E4, sensores IPS 4500 anterior a v7.1(6)E4, y sensores IPS... • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130717-ips • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •