← Back

CVE-2015-3966

nvd nist
Published: Aug 30, 2015Modified: May 6, 2026

JSON object

Loading...
4.0
Vector
AV:N/AC:L/Au:S/C:N/I:N/A:P
Exploitability: 8.0 / Impact: 2.9
Source: NVD

Description

The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before 8.1.7 allows remote authenticated users to cause a denial of service (VPN service restart) by leveraging a peer relationship to send a crafted configuration with compression.

Affected (10)

Innominate
1 product
Mguard Firmware
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Innominate
Mguard Firmware
Version 8.0.0
Mguard Firmware
Version 8.0.1
Mguard Firmware
Version 8.0.2
Mguard Firmware
Version 8.0.3
Mguard Firmware
Version 8.1.1
Mguard Firmware
Version 8.1.2
Mguard Firmware
Version 8.1.3
Mguard Firmware
Version 8.1.4
Mguard Firmware
Version 8.1.5
Mguard Firmware
Version 8.1.6

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

Source: ics-cert@hq.dhs.gov
Vendor Advisory
Source: ics-cert@hq.dhs.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.