CVE-2014-7992

The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote...

5.0 Medium

The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote attackers to obtain sensitive credential information from process memory via a session on TCP port 2067, aka Bug ID CSCur14014.

Exploit likelihood

27.2%Down 7.8 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2014-7992
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-200
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-7992
Updated: 2026-11-02

EUVDEUVD-2014-7841 No score

Record: EUVD-2014-7841
Updated: 2026-11-03

GitHub AdvisoriesGHSA-p6vm-9vwg-8vxw No score

The DLSw implementation in Cisco IOS does not initialize packet buffers, which allows remote...

Record: GHSA-p6vm-9vwg-8vxw
Weakness: CWE-200
Updated: 2026-11-02

Affected products

cisco ios

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	Cisco DLSw Information Disclosure Scanner	2014-11-17

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-7992 is a medium vulnerability (CVSS 5.0) in Cisco Ios, published November 18, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 27.2%, the 98th percentile. No source names a fixed version.