Cisco Ips Sensor Software vulnerabilities

9 CVEs affecting Cisco Ips Sensor Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0631, published 2015-02-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-4911, published 2006-09-21. High severity, CVSS 7.5. EPSS: 4.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Cisco IPS 5.0 before 5.0(6p2) and 5.1 before 5.1(2), when running in inline or promiscuous mode, allows remote attackers to bypass traffic inspection via a "crafted…
CVE-2006-4910, published 2006-09-21. Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days. The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to cause a denial of service (unresponsive device)…
CVE-2007-2688, published 2007-05-16. High severity, CVSS 7.8. EPSS: 3% chance of exploitation in the next 30 days. The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote…
CVE-2006-3596, published 2006-07-18. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System (IPS) 5.1(1) through 5.1(p1), as installed on various Cisco Intrusion Prevention System 42xx…
CVE-2014-0718, published 2014-02-22. High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days. The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via…
CVE-2014-0719, published 2014-02-22. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. The control-plane access-list implementation in Cisco IPS Software before 7.1(8p2)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (MainApp process outage) via crafted…
CVE-2014-0720, published 2014-02-22. High severity, CVSS 7.1. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via a flood of jumbo frames, aka Bug ID CSCuh94944.
CVE-2015-0631, published 2015-02-21. High severity, CVSS 7.1. EPSS: 1.2% chance of exploitation in the next 30 days. Race condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections…
CVE-2005-2681, published 2005-08-23. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System 5.0(1) and 5.0(2) allows local users with OPERATOR or VIEWER privileges to gain additional…