Vulnerability Bulletins |
Cisco Intrusion Prevention System Key Regeneration HTTPS Denial of Service Vulnerability |
|
| Affected software | Cisco |
|
A vulnerability in the SSL/TLS subsystem used by the web management interface of Cisco Intrusion Prevention System (IPS) software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.The vulnerability is due to a potential race condition while regenerating the affected devices cryptographic certificate and keys during an upgrade to image 7.2 or later from an image prior to 7.2. An attacker could exploit this vulnerability by negotiating a number of HTTPS More info: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150220-CVE-2015-0631?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Intrusion%20Prevention%20System%20Key%20Regeneration%20HTTPS |
|