CVE Daily

CVE-2014-7992

The DLSw implementation in Cisco IOS does not initialize packet buffers, which a...

Medium CVSS 5.0

Overview

The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensitive credential information from process memory via a session on TCP port 2067, aka Bug ID CSCur14014.

CWE: CWE-200 Published: 2014-11-18T01:59:07.217
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.0 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags