CVE-2014-7992 describes an information disclosure vulnerability in the DLSw implementation of Cisco IOS. Due to uninitialized packet buffers, remote attackers can extract sensitive credential information from process memory by establishing a session on TCP port 2067. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and allows for remote exploitation with low attack complexity, leading to confidentiality impact. While not actively exploited in the wild and not on the KEV catalog, a Metasploit module exists for scanning, and it has a high FAUCET Risk Score of 98/100, despite minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.