CVE-2015-0631
Race condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688.
Published:Feb 21, 2015
Last Modified:Apr 12, 2025
EPS:Feb 21, 2015
EPSS Score:0.00436
CVSS Score:7.1
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Ids 4210
Cisco
Ids 4210
Vendor
Cisco
Product
Ids 4215
Cisco
Ids 4215
Vendor
Cisco
Product
Ids 4220
Cisco
Ids 4220
Vendor
Cisco
Product
Ids 4230
Cisco
Ids 4230
Vendor
Cisco
Product
Ids 4235
Cisco
Ids 4235
Vendor
Cisco
Product
Ids 4250
Cisco
Ids 4250
Vendor
Cisco
Product
Ids 4250 Xl
Cisco
Ids 4250 Xl
Vendor
Cisco
Product
Ips 4240
Cisco
Ips 4240
Vendor
Cisco
Product
Ips 4255
Cisco
Ips 4255
Vendor
Cisco
Product
Ips 4260
Cisco
Ips 4260
Vendor
Cisco
Product
Ips 4270
Cisco
Ips 4270
Vendor
Cisco
Product
Ips Sensor Software
Cisco
Ips Sensor Software
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
