Denial of Service Vulnerability in Cisco Intrusion Prevention System and Intrusion Detection System
CVE-2014-3402

Currently unrated

Key Information:

Vendor

Cisco
Status
Intrusion Prevention System
Vendor
CVE Published:
10 October 2014

What is CVE-2014-3402?

The web framework in Cisco's Intrusion Prevention System and Intrusion Detection System has a flaw in how it manages user tokens within the authentication-manager process. This vulnerability can be exploited by remote attackers through specially crafted connection requests directed at the management interface, potentially causing the MainApp to hang temporarily. This security flaw highlights the importance of ensuring proper management and validation of user tokens to prevent service disruptions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://tools.cisco.com/security/center/viewAlert.x?alertI...
x_refsource_CONFIRM
http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.