Cisco Intrusion Prevention System — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Intrusion Prevention System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2008-2060 — CVSS 7.8 (high): Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2, when inline mode and…
• CVE-2013-1218 — CVSS 7.8 (high): Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software modules before 7.1(7)sp1E4 allows remote attackers to cause…
• CVE-2013-1243 — CVSS 7.8 (high): The IP stack in Cisco Intrusion Prevention System (IPS) Software in ASA 5500-X IPS-SSP software and hardware modules before 7.1(5)E4, IPS…
• CVE-2013-3410 — CVSS 7.8 (high): Cisco Intrusion Prevention System (IPS) Software on IPS NME devices before 7.0(9)E4 allows remote attackers to cause a denial of service…
• CVE-2013-3411 — CVSS 7.8 (high): The IDSM-2 drivers in Cisco Intrusion Prevention System (IPS) Software on Cisco Catalyst 6500 devices with an IDSM-2 module allow remote…
• CVE-2015-0654 — CVSS 7.1 (high): Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Prevention System (IPS) Software before…
• CVE-2014-3406 — CVSS 7.1 (high): Race condition in the IP logging feature in Cisco Intrusion Prevention System (IPS) Software 7.1(7)E4 and earlier allows remote attackers…
• CVE-2014-2103 — CVSS 6.8 (medium): Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a denial of service (MainApp process outage) via…
• CVE-2012-3899 — CVSS 5.0 (medium): sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0 does not properly allocate memory, which allows remote attackers to cause a…
• CVE-2012-3901 — CVSS 5.0 (medium): The updateTime function in sensorApp on Cisco IPS 4200 series sensors 7.0 and 7.1 allows remote attackers to cause a denial of service…
• CVE-2011-4022 — CVSS 5.0 (medium): The sensor in Cisco Intrusion Prevention System (IPS) 7.0 and 7.1 allows remote attackers to cause a denial of service (file-handle…
• CVE-2014-3402 — CVSS 5.0 (medium): The authentication-manager process in the web framework in Cisco Intrusion Prevention System (IPS) 7.0(8)E4 and earlier in Cisco Intrusion…
• CVE-2013-1219 — CVSS 4.4 (medium): SensorApp in Cisco Intrusion Prevention System (IPS) allows local users to cause a denial of service (Regex hardware job failure and…
• CVE-2013-5497 — CVSS 4.3 (medium): The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens…