Unrated severityNVD Advisory· Published Oct 10, 2014· Updated May 6, 2026
CVE-2014-3402
CVE-2014-3402
Description
The authentication-manager process in the web framework in Cisco Intrusion Prevention System (IPS) 7.0(8)E4 and earlier in Cisco Intrusion Detection System (IDS) does not properly manage user tokens, which allows remote attackers to cause a denial of service (temporary MainApp hang) via a crafted connection request to the management interface, aka Bug ID CSCuq39550.
Affected products
10cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(2\)e4:*:*:*:*:*:*:*+ 9 more
- cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(2\)e4:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(3\)e4:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(4\)e4:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(5a\)e4:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:intrusion_prevention_system:*:*:*:*:*:*:*:*range: <=7.0\(8\)e4
- cpe:2.3:a:cisco:intrusion_prevention_system:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(1\)e3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(2\)e3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(6\)e4:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:intrusion_prevention_system:7.0\(7\)e4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3402nvdVendor Advisory
- tools.cisco.com/security/center/viewAlert.xnvdVendor Advisory
News mentions
0No linked articles in our index yet.