Vulnerability in Cisco Firewall Services Module Software

CVE-2014-0710

Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) and 4.x before 4.1(15) allows remote attackers to cause a denial of service (device reload) via certain matching traffic, aka Bug ID CSCuj16824.

Vulnerability class: Race Condition

EPSS: 0.009 (56.9th percentile) — read the EPSS interpretation.

Affected products

Cisco Firewall_services_module_software — versions 4.0\(12\), 4.1(7), 3.1(12)
N/a — versions n/a

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)