Sign-up

ID

VAR-201402-0195


CVE

CVE-2014-0710


TITLE

Cisco Firewall Services Module Software Cut-Through Service operation interruption in proxy function (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2014-001448

DESCRIPTION

Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) and 4.x before 4.1(15) allows remote attackers to cause a denial of service (device reload) via certain matching traffic, aka Bug ID CSCuj16824. ( Device reload ) There are vulnerabilities that are put into a state. Vendors have confirmed this vulnerability Bug ID CSCuj16824 It is released as.Denial of service by a third party through specific matching traffic ( Device reload ) There is a possibility of being put into a state. An attacker can exploit this issue to cause a vulnerable device to reload, triggering a denial-of-service condition. This issue is tracked by Cisco Bug ID CSCuj16824

Trust: 1.98

sources: NVD: CVE-2014-0710 // JVNDB: JVNDB-2014-001448 // BID: 65662 // VULHUB: VHN-68203

AFFECTED PRODUCTS

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(6\)

Trust: 1.6

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(13\)

Trust: 1.6

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(3\)

Trust: 1.6

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(4\)

Trust: 1.6

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(5\)

Trust: 1.6

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(2\)

Trust: 1.6

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(8\)

Trust: 1.6

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(9\)

Trust: 1.6

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(7\)

Trust: 1.6

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(14\)

Trust: 1.6

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(10\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(6\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(5\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(11\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(17\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(13\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(20\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(10\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(15\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(21\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(21\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(17\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(10\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(1\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(14\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(18\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(19\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(18\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(9\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(13\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(4\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(8\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(7\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(2\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(15\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(16\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(3\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(5\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(6\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(5\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(8\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(11\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(26\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(12\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(23\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(24\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(2\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(15\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(8\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(16\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(11\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(3\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(19\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(22\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(14\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(4\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(4\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(20\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(12\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(13\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(6\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(10\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(11\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(7\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1\(1\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(12\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(14\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(12\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(27\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(9\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(2\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(7\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2\(25\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.0\(1\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.1\(3\)

Trust: 1.0

vendor:ciscomodel:firewall services module softwarescope:ltversion:4.x

Trust: 0.8

vendor:ciscomodel:firewall services module softwarescope:eqversion:3.2(28)

Trust: 0.8

vendor:ciscomodel:firewall services module softwarescope:ltversion:3.x

Trust: 0.8

vendor:ciscomodel:firewall services module softwarescope:eqversion:4.1(15)

Trust: 0.8

vendor:ciscomodel:firewall services modulescope:eqversion:4.1

Trust: 0.3

vendor:ciscomodel:firewall services modulescope:eqversion:4.0

Trust: 0.3

vendor:ciscomodel:firewall services modulescope:eqversion:3.2

Trust: 0.3

vendor:ciscomodel:firewall services modulescope:eqversion:3.1

Trust: 0.3

sources: BID: 65662 // JVNDB: JVNDB-2014-001448 // CNNVD: CNNVD-201402-315 // NVD: CVE-2014-0710

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2014-0710
value: HIGH

Trust: 1.0

NVD: CVE-2014-0710
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201402-315
value: HIGH

Trust: 0.6

VULHUB: VHN-68203
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2014-0710
severity: HIGH
baseScore: 7.1
vectorString: AV:N/AC:M/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-68203
severity: HIGH
baseScore: 7.1
vectorString: AV:N/AC:M/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-68203 // JVNDB: JVNDB-2014-001448 // CNNVD: CNNVD-201402-315 // NVD: CVE-2014-0710

PROBLEMTYPE DATA

problemtype:CWE-362

Trust: 1.9

sources: VULHUB: VHN-68203 // JVNDB: JVNDB-2014-001448 // NVD: CVE-2014-0710

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201402-315

TYPE

competitive condition

Trust: 0.6

sources: CNNVD: CNNVD-201402-315

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2014-001448

PATCH
title:cisco-sa-20140219-fwsmurl:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-fwsm
Trust: 0.8
title:32837url:http://tools.cisco.com/security/center/viewAlert.x?alertId=32837
Trust: 0.8
title:cisco-sa-20140219-fwsmurl:http://www.cisco.com/cisco/web/support/JP/112/1122/1122081_cisco-sa-20140219-fwsm-j.html
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2014-001448

EXTERNAL IDS
db:NVDid:CVE-2014-0710
Trust: 2.8
db:JVNDBid:JVNDB-2014-001448
Trust: 0.8
db:CNNVDid:CNNVD-201402-315
Trust: 0.7
db:CISCOid:20140219 CISCO FIREWALL SERVICES MODULE CUT-THROUGH PROXY DENIAL OF SERVICE VULNERABILITY
Trust: 0.6
db:SECUNIAid:56977
Trust: 0.6
db:BIDid:65662
Trust: 0.4
db:VULHUBid:VHN-68203
Trust: 0.1
sources:
            
            
            VULHUB: VHN-68203 // 
            
            
            
            BID: 65662 // 
            
            
            
            JVNDB: JVNDB-2014-001448 // 
            
            
            
            CNNVD: CNNVD-201402-315 // 
            
            
            
            NVD: CVE-2014-0710

REFERENCES
url:http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20140219-fwsm
Trust: 2.0
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-0710
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-0710
Trust: 0.8
url:http://secunia.com/advisories/56977
Trust: 0.6
url:http://www.cisco.com/c/en/us/products/interfaces-modules/catalyst-6500-series-firewall-services-module/index.html
Trust: 0.3
sources:
            
            
            VULHUB: VHN-68203 // 
            
            
            
            BID: 65662 // 
            
            
            
            JVNDB: JVNDB-2014-001448 // 
            
            
            
            CNNVD: CNNVD-201402-315 // 
            
            
            
            NVD: CVE-2014-0710

CREDITS
Cisco
Trust: 0.3
sources:
            
            
            BID: 65662

SOURCES
db:VULHUBid:VHN-68203
db:BIDid:65662
db:JVNDBid:JVNDB-2014-001448
db:CNNVDid:CNNVD-201402-315
db:NVDid:CVE-2014-0710

LAST UPDATE DATE
2024-11-23T22:27:21.807000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-68203date:2014-02-24T00:00:00
db:BIDid:65662date:2014-02-19T00:00:00
db:JVNDBid:JVNDB-2014-001448date:2014-02-25T00:00:00
db:CNNVDid:CNNVD-201402-315date:2014-02-26T00:00:00
db:NVDid:CVE-2014-0710date:2024-11-21T02:02:40.843

SOURCES RELEASE DATE
db:VULHUBid:VHN-68203date:2014-02-22T00:00:00
db:BIDid:65662date:2014-02-19T00:00:00
db:JVNDBid:JVNDB-2014-001448date:2014-02-25T00:00:00
db:CNNVDid:CNNVD-201402-315date:2014-02-26T00:00:00
db:NVDid:CVE-2014-0710date:2014-02-22T21:55:09.530