CVE-2015-3966

Published Aug 30, 2015

Last updated 10 years ago

Overview

Description
The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before 8.1.7 allows remote authenticated users to cause a denial of service (VPN service restart) by leveraging a peer relationship to send a crafted configuration with compression.
Source
ics-cert@hq.dhs.gov
NVD status
Analyzed

Risk scores

CVSS 2.0

Type
Primary
Base score
4
Impact score
2.9
Exploitability score
8
Vector string
AV:N/AC:L/Au:S/C:N/I:N/A:P

Weaknesses

nvd@nist.gov
CWE-20

Social media

Hype score
Not currently trending

Configurations