CVE-2015-0654
Severity Score
7.1
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7.3(3)E4 allows remote attackers to cause a denial of service (process hang) by establishing many HTTPS sessions, aka Bug ID CSCuq40652.
Condición de carrera en la implementación TLS en MainApp en la interfaz de gestión en Cisco Intrusion Prevention System (IPS) Software anterior a 7.3(3)E4 permite a atacantes remotos causar una denegación de servicio (cuelgue del proceso) mediante el establecimiento de muchas sesiones HTTPS, también conocido como Bug ID CSCuq40652.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-01-07 CVE Reserved
- 2015-03-13 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id/1031908 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-ips | 2015-09-11 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Intrusion Prevention System Search vendor "Cisco" for product "Intrusion Prevention System" | 7.2\(1\)e4 Search vendor "Cisco" for product "Intrusion Prevention System" and version "7.2\(1\)e4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Intrusion Prevention System Search vendor "Cisco" for product "Intrusion Prevention System" | 7.2\(2\)e4 Search vendor "Cisco" for product "Intrusion Prevention System" and version "7.2\(2\)e4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Intrusion Prevention System Search vendor "Cisco" for product "Intrusion Prevention System" | 7.3\(2\)e4 Search vendor "Cisco" for product "Intrusion Prevention System" and version "7.3\(2\)e4" | - |
Affected
| ||||||