Cisco Bug: CSCuq39550 - Cisco IPS MainApp Denial of Service Vulnerability
Last Modified
Nov 01, 2017
Products (1)
- Cisco IPS 4200 Series Sensors
Known Affected Releases
7.1(8)S17 7.3(2)E4
Description (partial)
Symptom: A vulnerability in the web framework of the Cisco Intrusion Prevention System (IPS) Software could allow an authenticated, remote attacker to cause MainApp to hang intermittently due to the authentication manager process creating a denial of service (DoS) condition. The vulnerability is due to improper handling of user tokens. An attacker could exploit this vulnerability by sending a crafted connection request to the Cisco IPS management interface. Conditions: Default configuration.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Status
- Severity
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases