Read the docs
TI-2015-00582 Aliases CVE-2015-0631GHSA-j55m-hp7r-r977

Race condition in the SSL implementation on Cisco Intrusion Prevention System (IPS)…

Priority LOW 34CWE-362Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
None · None · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Race condition in the SSL implementation on Cisco Intrusion Prevention System (IPS) devices allows remote attackers to cause a denial of service by making many management-interface HTTPS connections during the key-regeneration phase of an upgrade, aka Bug ID CSCui25688.

Why it matters now

EPSS 0.01162 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:a:cisco:ips_sensor_software:7.2\(1\)e4:*:*:*:*:*:*:*7.2(1)e4VulnerableCisco
cpe:2.3:a:cisco:ips_sensor_software:7.2\(2\)e4:*:*:*:*:*:*:*7.2(2)e4VulnerableCisco
cpe:2.3:h:cisco:ids_4210:*:*:*:*:*:*:*:*all versionsRunning onCisco
cpe:2.3:h:cisco:ids_4215:*:*:*:*:*:*:*:*all versionsRunning onCisco
cpe:2.3:h:cisco:ids_4220:*:*:*:*:*:*:*:*all versionsRunning onCisco
cpe:2.3:h:cisco:ids_4230:*:*:*:*:*:*:*:*all versionsRunning onCisco
cpe:2.3:h:cisco:ids_4235:*:*:*:*:*:*:*:*all versionsRunning onCisco
cpe:2.3:h:cisco:ids_4250:*:*:*:*:*:*:*:*all versionsRunning onCisco
cpe:2.3:h:cisco:ids_4250_xl:*:*:*:*:*:*:*:*all versionsRunning onCisco
cpe:2.3:h:cisco:ips_4240:*:*:*:*:*:*:*:*all versionsRunning onCisco
  • cpe:2.3:a:cisco:ips_sensor_software:7.2\(1\)e4:*:*:*:*:*:*:* Versions 7.2(1)e4 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ips_sensor_software:7.2\(2\)e4:*:*:*:*:*:*:* Versions 7.2(2)e4 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:ids_4210:*:*:*:*:*:*:*:* Versions all versions Running on ·Cisco
  • cpe:2.3:h:cisco:ids_4215:*:*:*:*:*:*:*:* Versions all versions Running on ·Cisco
  • cpe:2.3:h:cisco:ids_4220:*:*:*:*:*:*:*:* Versions all versions Running on ·Cisco
  • cpe:2.3:h:cisco:ids_4230:*:*:*:*:*:*:*:* Versions all versions Running on ·Cisco
  • cpe:2.3:h:cisco:ids_4235:*:*:*:*:*:*:*:* Versions all versions Running on ·Cisco
  • cpe:2.3:h:cisco:ids_4250:*:*:*:*:*:*:*:* Versions all versions Running on ·Cisco
  • cpe:2.3:h:cisco:ids_4250_xl:*:*:*:*:*:*:*:* Versions all versions Running on ·Cisco
  • cpe:2.3:h:cisco:ips_4240:*:*:*:*:*:*:*:* Versions all versions Running on ·Cisco
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:cisco:ips_4255:*:*:*:*:*:*:*:*all versionsRunning onCisco
cpe:2.3:h:cisco:ips_4260:*:*:*:*:*:*:*:*all versionsRunning onCisco
cpe:2.3:h:cisco:ips_4270:*:*:*:*:*:*:*:*all versionsRunning onCisco
  • cpe:2.3:h:cisco:ips_4255:*:*:*:*:*:*:*:* Versions all versions Running on ·Cisco
  • cpe:2.3:h:cisco:ips_4260:*:*:*:*:*:*:*:* Versions all versions Running on ·Cisco
  • cpe:2.3:h:cisco:ips_4270:*:*:*:*:*:*:*:* Versions all versions Running on ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-0631
  2. 2026-10-03 Alias added: GHSA-j55m-hp7r-r977

References

Advisory 1

  • TI-2006-04736 Unspecified vulnerability in Cisco IPS 5.0 before 5.0(6p2) and 5.1 before 5.1(2), when… CVSS 2.0HIGH 7.5
  • TI-2007-02599 The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not… CVSS 2.0HIGH 7.8
  • TI-2014-00669 The control-plane access-list implementation in Cisco IPS Software before 7.1(8p2)E4 and… CVSS 2.0HIGH 7.8
  • TI-2014-00668 The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2… CVSS 2.0HIGH 7.1
  • TI-2014-00670 Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to… CVSS 2.0HIGH 7.1
  • TI-2005-02544 Unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion… CVSS 2.0HIGH 7.2
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences