CVE-2015-3966 The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before 8.1.7 allows remote authenticated users to cause a denial of service (VPN service restart) by leveraging a peer...
MediumCVSS 4.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before 8.1.7 allows remote authenticated users to cause a denial of service (VPN service restart) by leveraging a peer relationship to send a crafted configuration with compression.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| innominate mguard firmware | = 8.0.0 | No fix listed |
| innominate mguard firmware | = 8.0.1 | No fix listed |
| innominate mguard firmware | = 8.0.2 | No fix listed |
| innominate mguard firmware | = 8.0.3 | No fix listed |
| innominate mguard firmware | = 8.1.1 | No fix listed |
| innominate mguard firmware | = 8.1.2 | No fix listed |
| innominate mguard firmware | = 8.1.3 | No fix listed |
| innominate mguard firmware | = 8.1.4 | No fix listed |
| innominate mguard firmware | = 8.1.5 | No fix listed |
| innominate mguard firmware | = 8.1.6 | No fix listed |
References
- www.innominate.com vendor-advisory
- ics-cert.us-cert.gov third-party-advisory us-government-resource