Cisco Intrusion Prevention System vulnerabilities

14 CVEs affecting Cisco Intrusion Prevention System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0654, published 2015-03-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-5497, published 2013-09-19. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens, which allows remote attackers to cause a denial of service…
CVE-2013-1218, published 2013-07-18. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause a denial of service (Analysis Engine process hang or device…
CVE-2008-2060, published 2008-06-18. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to…
CVE-2014-3402, published 2014-10-10. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. The authentication-manager process in the web framework in Cisco Intrusion Prevention System (IPS) 7.0(8)E4 and earlier in Cisco Intrusion Detection System (IDS) does not properly manage user tokens,…
CVE-2011-4022, published 2012-05-03. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. The sensor in Cisco Intrusion Prevention System (IPS) 7.0 and 7.1 allows remote attackers to cause a denial of service (file-handle exhaustion and mainApp hang) by making authentication attempts that…
CVE-2013-3411, published 2013-07-18. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. The IDSM-2 drivers in Cisco Intrusion Prevention System (IPS) Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote attackers to cause a denial of service (device hang) via…
CVE-2013-3410, published 2013-07-18. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service (device reload) via malformed IPv4 packets that trigger…
CVE-2013-1243, published 2013-07-18. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules before 7.1(5)E4, IPS 4500 sensors before 7.1(6)E4, and IPS 4300 sensors before…
CVE-2015-0654, published 2015-03-13. High severity, CVSS 7.1. EPSS: 1.3% chance of exploitation in the next 30 days. Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before 7.3(3)E4 allows remote attackers to cause a denial of…
CVE-2012-3899, published 2012-09-16. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and process crash, and…

Latest

CVE-2014-3406, published 2014-10-19. High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days. Race condition in the IP logging feature in Cisco Intrusion Prevention System (IPS) Software 7.1(7)E4 and earlier allows remote attackers to cause a denial of service (device reload) via crafted IP…
CVE-2014-2103, published 2014-02-27. Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days. Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a denial of service (MainApp process outage) via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309.
CVE-2013-1219, published 2013-04-29. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. SensorApp in Cisco Intrusion Prevention System (IPS) allows local users to cause a denial of service (Regex hardware job failure and application hang) via a (1) initiate signature upgrade, (2)…