Description
The firewall subsystem in Cisco Identity Services Engine has an incorrect rule for open ports, which allows remote attackers to cause a denial of service (CPU consumption or process crash) via a flood of malformed IP packets, aka Bug ID CSCug94572.
References
- 95659 vdb-entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=30217
- 61452 vdb-entry
- cisco-ise-cve20133445-dos(85982) vdb-entry
- 1028837 vdb-entry
- 20130725 Cisco Identity Services Engine High CPU Utilization Vulnerability vendor-advisory