CVE-2014-7992

The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensitive credential information from process memory via a session on TCP port 2067, aka Bug ID CSCur14014.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

27.15% chance of exploitation in the next 30 days, 98th percentile

Published

2014-11-18

Updated

2024-08-06

Proof-of-concept exploits (1)

• tt5555/dlsw_exploit9★ · 2014-12-04

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/dlsw/dlsw_leak_capture.…

References

• CVE Record
• NVD entry

Related

• CVE-2014-7981
• CVE-2014-8008
• CVE-2014-7959
• CVE-2014-8082
• CVE-2014-7958
• CVE-2014-8087