CVE-2008-2060
Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of service (panic), and possibly bypass…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.71%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of service (panic), and possibly bypass intended restrictions on network traffic, via a "specific series of jumbo Ethernet frames."
- CVSS 2.0
- 7.8 HIGHAV:N/AC:M/Au:N/C:P/I:N/A:C
- EPSS
- 1.71% probability · 76th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-16
- Affected
- cisco/intrusion prevention system
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/30767
- http://www.cisco.com/en/US/products/products_security_advisory09186a00809b3842.shtmlPatch
- http://www.securityfocus.com/bid/29791
- http://www.securitytracker.com/id?1020326
- http://www.vupen.com/english/advisories/2008/1872/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43166
- http://secunia.com/advisories/30767
- http://www.cisco.com/en/US/products/products_security_advisory09186a00809b3842.shtmlPatch
- http://www.securityfocus.com/bid/29791
- http://www.securitytracker.com/id?1020326
- http://www.vupen.com/english/advisories/2008/1872/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43166
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.