CVE-2014-2103: Input Validation

Published Feb 27, 2014

Updated

Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a denial of service (MainApp process outage) via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309.

Affected Software

16 affected components

Cisco Intrusion Prevention System=5.1

Cisco Intrusion Prevention System=6.0

Cisco Intrusion Prevention System=6.0.2.0

Cisco Intrusion Prevention System=7.0

Cisco Intrusion Prevention System=7.0\(1\)e3

Cisco Intrusion Prevention System=7.0\(2\)e3

Cisco Intrusion Prevention System=7.0\(2\)e4

Cisco Intrusion Prevention System=7.0\(3\)e4

Cisco Intrusion Prevention System=7.0\(4\)e4

Cisco Intrusion Prevention System=7.0\(5a\)e4

Cisco Intrusion Prevention System=7.0\(6\)e4

Cisco Intrusion Prevention System=7.0\(7\)e4

Cisco Intrusion Prevention System=7.0\(8\)e4

Cisco Intrusion Prevention System=7.0\(9\)e4

Cisco Intrusion Prevention System=7.1

Cisco Intrusion Prevention System

Event History

Feb 27, 2014

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Data Sourced

via NVD·08:55 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-2103?

CVE-2014-2103 has a medium severity rating due to its potential to cause denial of service conditions.

How do I fix CVE-2014-2103?

To fix CVE-2014-2103, upgrade to the latest version of Cisco Intrusion Prevention System software that addresses this vulnerability.

Which software versions are affected by CVE-2014-2103?

CVE-2014-2103 affects Cisco Intrusion Prevention System versions 5.1, 6.0, 7.0 and some subversions within the 7.x releases.

What type of attack does CVE-2014-2103 enable?

CVE-2014-2103 allows remote attackers to conduct a denial of service attack via malformed SNMP packets.

Has CVE-2014-2103 been mitigated by Cisco?

Yes, Cisco has released updates and patches to mitigate the risks associated with CVE-2014-2103.