Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed HTTP transit packet.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco IOS 输入验证错误漏洞
Vulnerability Description
Cisco IOS是美国思科(Cisco)公司的一套为其网络设备开发的操作系统。 如果Cisco IOS软件配置了IOS防火墙应用程序检查控制(AIC)且AIC中包含有HTTP应用程序特定策略的话,则在处理畸形的HTTP中间报文时存在输入验证错误漏洞。成功利用这个漏洞可能导致受影响的设备重载。 HTTP运行在TCP上。如果要利用这个漏洞,在处理恶意通讯之前必须要完成客户端与服务器之间完整的三重握手才能导致设备重载。
CVSS Information
N/A
Vulnerability Type
N/A