Published: 18/11/2014 Updated: 08/09/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 446

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote malicious users to obtain sensitive credential information from process memory via a session on TCP port 2067, aka Bug ID CSCur14014.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco ios -

A vulnerability in the DLSw feature of Cisco IOS could allow an unauthenticated, remote attacker to extract information from previously processed packets The vulnerability is due to the lack of initialization of packet buffers An attacker could exploit this vulnerability by connecting to the DLSw port (TCP/2067) An exploit could allow the attac ...

cisco dlsw exploit

DLSW Exploit Cisco DLSw Information Disclosure Vulnerability There is a bug in Cisco's DLSw implementation affecting 12x and 15x trains that allows an unuthenticated remote attacker to retrieve the partial contents of packets traversing a Cisco router with DLSw configured and active Vulnerability discovered by: - Tate Hansen - John McLeod Kyle Rainey built lab to recrea

cisco dlsw exploit

DLSW Exploit Cisco DLSw Information Disclosure Vulnerability There is a bug in Cisco's DLSw implementation affecting 12x and 15x trains that allows an unuthenticated remote attacker to retrieve the partial contents of packets traversing a Cisco router with DLSw configured and active Vulnerability discovered by: - Tate Hansen - John McLeod Kyle Rainey built lab to recrea

CWE-200 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7992 http://tools.cisco.com/security/center/viewAlert.x?alertId=36453 http://www.securitytracker.com/id/1031220 http://www.securityfocus.com/bid/71145 https://exchange.xforce.ibmcloud.com/vulnerabilities/98724 https://nvd.nist.gov https://github.com/tt5555/dlsw_exploit http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20141118-CVE-2014-7992

CVE-2014-7992

Vulnerability Summary

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect