Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.8
CVSSv2

CVE-2014-2112

Published: 27/03/2014 Updated: 23/05/2017
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

The SSL VPN (aka WebVPN) feature in Cisco IOS 15.1 up to and including 15.4 allows remote malicious users to cause a denial of service (memory consumption) via crafted HTTP requests, aka Bug ID CSCuf51357.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios 15.4

cisco ios 15.3

cisco ios 15.2

cisco ios 15.1

Vendor Advisories

Cisco: Cisco IOS Software SSL VPN Denial of Service Vulnerability
A vulnerability in the Secure Sockets Layer (SSL) VPN subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition The vulnerability is due to a failure to process certain types of HTTP requests To exploit the vulnerability, an attacker could submit crafted requests designed to cons ...

References

CWE-20http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-ios-sslvpnhttp://www.securityfocus.com/bid/66462https://nvd.nist.govhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-ios-sslvpn
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-30310CVE-2024-21683CVE-2024-22187chromedeserializationXPath injectionCVE-2024-27842denial of serviceCVE-2024-24851googleCVE-2024-35400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook