CVE-2015-0654: Race condition in the TLS implementation in MainApp in the management interface in Cisco Intrusion Preventi...

Security readout for executives and security teams

CVE-2015-0654 is a denial-of-service flaw in Cisco IPS Software management HTTPS handling. An attacker who can reach the management interface could create many HTTPS sessions and hang the MainApp process, disrupting device management rather than directly stealing data. Exposure is most likely where Cisco IPS management interfaces are reachable over HTTPS by untrusted or broad internal networks and the software is older than 7.3(3)E4. Treat this as a management-plane availability risk. It is not reported as active exploitation in the provided sources, but exposed legacy Cisco IPS management interfaces should be upgraded or constrained promptly. Mitigation focus: Identify Cisco IPS systems running software before 7.3(3)E4.; Upgrade affected systems to 7.3(3)E4 or a vendor-supported fixed release.; Review Cisco advisory guidance for any approved interim controls..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.