Details of VAR-201410-0066

ID

VAR-201410-0066

CVE

CVE-2014-3406

TITLE

Cisco Intrusion Prevention System Software IP Service operation interruption in logging function (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2014-004985

DESCRIPTION

Race condition in the IP logging feature in Cisco Intrusion Prevention System (IPS) Software 7.1(7)E4 and earlier allows remote attackers to cause a denial of service (device reload) via crafted IP traffic that matches a problematic rule, aka Bug ID CSCud82085. ( Device reload ) There are vulnerabilities that are put into a state. Cisco Intrusion Prevention System is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. This issue is being tracked by Cisco Bug ID CSCud82085. The system can immediately interrupt, adjust or isolate some abnormal or harmful network data transmission behaviors

Trust: 1.98

sources: NVD: CVE-2014-3406 // JVNDB: JVNDB-2014-004985 // BID: 70581 // VULHUB: VHN-71346

AFFECTED PRODUCTS

vendor:	cisco	model:	intrusion prevention system e4	scope:	eq	version:	7.0	Trust: 1.8
vendor:	cisco	model:	intrusion prevention system 7.1 e4	scope:	-	version:	-	Trust: 1.5
vendor:	cisco	model:	intrusion prevention system 5.1	scope:	-	version:	-	Trust: 1.2
vendor:	cisco	model:	intrusion prevention system	scope:	lte	version:	7.1\(7\)e4	Trust: 1.0
vendor:	cisco	model:	intrusion prevention system	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	intrusion prevention system software	scope:	lte	version:	7.1(7)e4	Trust: 0.8
vendor:	cisco	model:	intrusion prevention system e3	scope:	eq	version:	7.0	Trust: 0.6
vendor:	cisco	model:	intrusion prevention system	scope:	eq	version:	7.1\(7\)e4	Trust: 0.6
vendor:	cisco	model:	intrusion prevention system e4	scope:	eq	version:	7.1(4)	Trust: 0.3
vendor:	cisco	model:	intrusion prevention system e4	scope:	eq	version:	7.1(3)	Trust: 0.3
vendor:	cisco	model:	intrusion prevention system	scope:	eq	version:	7.1	Trust: 0.3
vendor:	cisco	model:	intrusion prevention system	scope:	eq	version:	7.0	Trust: 0.3
vendor:	cisco	model:	intrusion prevention system	scope:	eq	version:	6.1	Trust: 0.3
vendor:	cisco	model:	intrusion prevention system	scope:	eq	version:	6.0	Trust: 0.3
vendor:	cisco	model:	intrusion prevention system	scope:	eq	version:	5.1(2)	Trust: 0.3
vendor:	cisco	model:	intrusion prevention system	scope:	eq	version:	5.1(1)	Trust: 0.3

sources: BID: 70581 // JVNDB: JVNDB-2014-004985 // CNNVD: CNNVD-201410-633 // NVD: CVE-2014-3406

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2014-3406
value:	HIGH
Trust: 1.0
NVD:	CVE-2014-3406
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201410-633
value:	HIGH
Trust: 0.6
VULHUB:	VHN-71346
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2014-3406
severity:	HIGH
baseScore:	7.1
vectorString:	AV:N/AC:M/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-71346
severity:	HIGH
baseScore:	7.1
vectorString:	AV:N/AC:M/AU:N/C:N/I:N/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-71346 // JVNDB: JVNDB-2014-004985 // CNNVD: CNNVD-201410-633 // NVD: CVE-2014-3406

PROBLEMTYPE DATA

problemtype:

CWE-362

Trust: 1.9

sources: VULHUB: VHN-71346 // JVNDB: JVNDB-2014-004985 // NVD: CVE-2014-3406

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201410-633

TYPE

competitive condition

Trust: 0.6

sources: CNNVD: CNNVD-201410-633

CONFIGURATIONS

sources: JVNDB: JVNDB-2014-004985

PATCH

title:	Cisco Intrusion Prevention System IP Logging Denial of Service Vulnerability	url:	http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3406	Trust: 0.8
title:	36078	url:	http://tools.cisco.com/security/center/viewAlert.x?alertId=36078	Trust: 0.8

sources: JVNDB: JVNDB-2014-004985

EXTERNAL IDS

db:	NVD	id:	CVE-2014-3406	Trust: 2.8
db:	JVNDB	id:	JVNDB-2014-004985	Trust: 0.8
db:	CNNVD	id:	CNNVD-201410-633	Trust: 0.7
db:	BID	id:	70581	Trust: 0.4
db:	VULHUB	id:	VHN-71346	Trust: 0.1

sources: VULHUB: VHN-71346 // BID: 70581 // JVNDB: JVNDB-2014-004985 // CNNVD: CNNVD-201410-633 // NVD: CVE-2014-3406

REFERENCES

url:	http://tools.cisco.com/security/center/viewalert.x?alertid=36078	Trust: 2.0
url:	http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2014-3406	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-3406	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-3406	Trust: 0.8
url:	http://www.cisco.com/	Trust: 0.3

sources: VULHUB: VHN-71346 // BID: 70581 // JVNDB: JVNDB-2014-004985 // CNNVD: CNNVD-201410-633 // NVD: CVE-2014-3406

CREDITS

Cisco

Trust: 0.3

sources: BID: 70581

SOURCES

db:	VULHUB	id:	VHN-71346
db:	BID	id:	70581
db:	JVNDB	id:	JVNDB-2014-004985
db:	CNNVD	id:	CNNVD-201410-633
db:	NVD	id:	CVE-2014-3406

LAST UPDATE DATE

2024-11-23T22:02:02.818000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-71346	date:	2014-10-22T00:00:00
db:	BID	id:	70581	date:	2014-10-14T00:00:00
db:	JVNDB	id:	JVNDB-2014-004985	date:	2014-10-24T00:00:00
db:	CNNVD	id:	CNNVD-201410-633	date:	2014-11-03T00:00:00
db:	NVD	id:	CVE-2014-3406	date:	2024-11-21T02:08:01.513

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-71346	date:	2014-10-19T00:00:00
db:	BID	id:	70581	date:	2014-10-14T00:00:00
db:	JVNDB	id:	JVNDB-2014-004985	date:	2014-10-24T00:00:00
db:	CNNVD	id:	CNNVD-201410-633	date:	2014-10-22T00:00:00
db:	NVD	id:	CVE-2014-3406	date:	2014-10-19T01:55:13.683