CVE-2011-4022: The sensor in Cisco Intrusion Prevention System (IPS) 7.0 and 7.1 allows remote attackers to cause a denial...

Security readout for executives and security teams

CVE-2011-4022 is a denial-of-service flaw in Cisco Intrusion Prevention System sensors running 7.0 or 7.1. Repeated authentication attempts above the configured limit can exhaust file handles and hang the main application, disrupting the IPS sensor’s security monitoring role. Exposure is likely limited to organizations still operating Cisco IPS sensors on 7.0 or 7.1, especially where authentication services are reachable by untrusted networks. Treat this as a resilience issue for legacy security infrastructure. Prioritize if Cisco IPS 7.0 or 7.1 is still deployed, because loss of the sensor can reduce detection coverage during an incident. Mitigation focus: Inventory Cisco IPS sensors and identify versions 7.0 and 7.1.; Review Cisco guidance and the referenced readme for CSCto51204 remediation.; Restrict access to IPS authentication interfaces to trusted management networks..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.