Cisco IOS CVE-2014-7992 Information Disclosure Vulnerability
BID:71145
Info
Cisco IOS CVE-2014-7992 Information Disclosure Vulnerability
| Bugtraq ID: | 71145 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-7992 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 17 2014 12:00AM |
| Updated: | Nov 17 2014 12:00AM |
| Credit: | Tate Hansen and John McLeod of FishNet Security, and Kyle Rainey. |
| Vulnerable: |
Cisco IOS 0 |
| Not Vulnerable: | |
Discussion
Cisco IOS CVE-2014-7992 Information Disclosure Vulnerability
Cisco IOS is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to obtain sensitive information that may aid in further attacks.
This issue is being tracked by Cisco bug ID CSCur14014.
Cisco IOS is prone to an information-disclosure vulnerability.
An attacker can exploit this issue to obtain sensitive information that may aid in further attacks.
This issue is being tracked by Cisco bug ID CSCur14014.
Exploit / POC
Cisco IOS CVE-2014-7992 Information Disclosure Vulnerability
Attackers can exploit this issue using readily available tools.
Attackers can exploit this issue using readily available tools.
Solution / Fix
Cisco IOS CVE-2014-7992 Information Disclosure Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].