CVE-2015-3966

The IPsec SA establishment process on Innominate mGuard devices with firmware 8.x before 8.1.7 allows remote authenticated users to cause a denial of service (VPN service restart) by leveraging a peer relationship to send a crafted configuration with compression.

• CWE-20

• http://www.innominate.com/data/downloads/software/innominate_security_advisory_20150714_001_en.pdfVendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-15-239-03Third Party Advisory, US Government Resource
• http://www.innominate.com/data/downloads/software/innominate_security_advisory_20150714_001_en.pdfVendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-15-239-03Third Party Advisory, US Government Resource

Published

Aug 30, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3960The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum…
• CVE-2015-3961The web-server component in MNS before 4.5.6 on Belden Garre…
• CVE-2015-3962Schneider Electric StruxureWare Building Expert MPM before 2…
• CVE-2015-3963Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before …
• CVE-2015-3964SMA Solar Sunny WebBox has hardcoded passwords, which makes …
• CVE-2015-3965Hospira Symbiq Infusion System 3.13 and earlier allows remot…
• CVE-2015-3967Cross-site request forgery (CSRF) vulnerability on Janitza U…
• CVE-2015-3968The FTP service on Janitza UMG 508, 509, 511, 604, and 605 d…
• CVE-2015-3969Janitza UMG 508, 509, 511, 604, and 605 devices allow remote…
• CVE-2015-3970Multiple cross-site scripting (XSS) vulnerabilities in the w…
• CVE-2015-3971The debug interface on Janitza UMG 508, 509, 511, 604, and 6…
• CVE-2015-3972The web interface on Janitza UMG 508, 509, 511, 604, and 605…