Auth bypass in Cisco Intrusion Prevention System

CVE-2011-4022

The sensor in Cisco Intrusion Prevention System (IPS) 7.0 and 7.1 allows remote attackers to cause a denial of service (file-handle exhaustion and mainApp hang) by making authentication attempts that exceed the configured limit, aka Bug ID CSCto51204.

Vulnerability class: Broken Authentication

EPSS: 0.014 (68.7th percentile) — read the EPSS interpretation.

Affected products

Cisco Intrusion_prevention_system — versions 7.0, 7.1
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

psirt@cisco.com (x_refsource_CONFIRM)