CVE-2015-3966

Опубликовано: 30 авг. 2015

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before 8.1.7 allows remote authenticated users to cause a denial of service (VPN service restart) by leveraging a peer relationship to send a crafted configuration with compression.

Ссылки

http://www.innominate.com/data/downloads/software/innominate_security_advisory_20150714_001_en.pdf
Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-15-239-03
Third Party Advisory
US Government Resource
http://www.innominate.com/data/downloads/software/innominate_security_advisory_20150714_001_en.pdf
Vendor Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-15-239-03
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:innominate:mguard_firmware:8.0.0:*:*:*:*:*:*:*

cpe:2.3:o:innominate:mguard_firmware:8.0.1:*:*:*:*:*:*:*

cpe:2.3:o:innominate:mguard_firmware:8.0.2:*:*:*:*:*:*:*

cpe:2.3:o:innominate:mguard_firmware:8.0.3:*:*:*:*:*:*:*

cpe:2.3:o:innominate:mguard_firmware:8.1.1:*:*:*:*:*:*:*

cpe:2.3:o:innominate:mguard_firmware:8.1.2:*:*:*:*:*:*:*

cpe:2.3:o:innominate:mguard_firmware:8.1.3:*:*:*:*:*:*:*

cpe:2.3:o:innominate:mguard_firmware:8.1.4:*:*:*:*:*:*:*

cpe:2.3:o:innominate:mguard_firmware:8.1.5:*:*:*:*:*:*:*

cpe:2.3:o:innominate:mguard_firmware:8.1.6:*:*:*:*:*:*:*

EPSS

Процентиль: 51%

0.00277

Низкий

4 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-9rmr-v76m-g3pp

github

больше 3 лет назад