CVE-2014-0719

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-02-22 · updated 2026-06-17
Weakness: CWE-264

Description

The control-plane access-list implementation in Cisco IPS Software before 7.1(8p2)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (MainApp process outage) via crafted packets to TCP port 7000, aka Bug ID CSCui67394.

Affected products

Cisco Ips Sensor Software: through 7.1\(1\)e4; 7.1(2)e4, 7.1(3)e4, 7.1(4)e4, 7.1(6)e4, 7.1(7)e4, 7.1(8)e4 (+1)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-ips
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140219-ips

Get alerted when CVE-2014-0719 or the next vulnerability affects your stack