Lucene search

K
ciscoCiscoCISCO-SA-20140924-NAT
HistorySep 24, 2014 - 4:00 p.m.

Cisco IOS Software Network Address Translation Denial of Service Vulnerability

2014-09-2416:00:00
tools.cisco.com
25

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

EPSS

0.012

Percentile

85.1%

A vulnerability in the Network Address Translation (NAT) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper translation of IP version 4 (IPv4) packets.

Cisco has released software updates that address this vulnerability.

This advisory is available at the following link:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-nat[“https://tvce.cisco.com/security/AIMS/https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-nat”]

Note: The September 24, 2014, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. All advisories address vulnerabilities in Cisco IOS Software. Individual publication links are in Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep14.html[“http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep14.html”]

Affected configurations

Vulners
Node
ciscoiosMatch15.0m
OR
ciscoiosMatch15.0xa
OR
ciscoiosMatch15.1t
OR
ciscoiosMatch15.1xb
OR
ciscoiosMatch15.3t
OR
ciscoiosMatch15.1m
OR
ciscoiosMatch15.1gc
OR
ciscoiosMatch15.2m
OR
ciscoiosMatch15.2gc
OR
ciscoiosMatch15.4t
OR
ciscoiosMatch15.2e
OR
ciscoiosMatch15.2jb
OR
ciscoiosMatch15.2jax
OR
ciscoiosMatch15.3m
OR
ciscoiosMatch15.2jn
OR
ciscoiosMatch15.2jaz
OR
ciscoiosMatch15.3xb
OR
ciscoiosMatch15.4cg
OR
ciscoiosMatch15.3ja
OR
ciscoiosMatch15.6t
OR
ciscoiosMatch15.0\(1\)m1
OR
ciscoiosMatch15.0\(1\)m5
OR
ciscoiosMatch15.0\(1\)m4
OR
ciscoiosMatch15.0\(1\)m3
OR
ciscoiosMatch15.0\(1\)m2
OR
ciscoiosMatch15.0\(1\)m6
OR
ciscoiosMatch15.0\(1\)m
OR
ciscoiosMatch15.0\(1\)m7
OR
ciscoiosMatch15.0\(1\)m10
OR
ciscoiosMatch15.0\(1\)m9
OR
ciscoiosMatch15.0\(1\)m8
OR
ciscoiosMatch15.0\(1\)m6a
OR
ciscoiosMatch15.0\(1\)xa2
OR
ciscoiosMatch15.0\(1\)xa4
OR
ciscoiosMatch15.0\(1\)xa1
OR
ciscoiosMatch15.0\(1\)xa3
OR
ciscoiosMatch15.0\(1\)xa
OR
ciscoiosMatch15.0\(1\)xa5
OR
ciscoiosMatch15.1\(2\)t
OR
ciscoiosMatch15.1\(1\)t4
OR
ciscoiosMatch15.1\(3\)t2
OR
ciscoiosMatch15.1\(1\)t1
OR
ciscoiosMatch15.1\(2\)t0a
OR
ciscoiosMatch15.1\(3\)t3
OR
ciscoiosMatch15.1\(1\)t3
OR
ciscoiosMatch15.1\(2\)t3
OR
ciscoiosMatch15.1\(2\)t4
OR
ciscoiosMatch15.1\(1\)t2
OR
ciscoiosMatch15.1\(3\)t
OR
ciscoiosMatch15.1\(2\)t2a
OR
ciscoiosMatch15.1\(3\)t1
OR
ciscoiosMatch15.1\(1\)t
OR
ciscoiosMatch15.1\(2\)t2
OR
ciscoiosMatch15.1\(2\)t1
OR
ciscoiosMatch15.1\(2\)t5
OR
ciscoiosMatch15.1\(3\)t4
OR
ciscoiosMatch15.1\(1\)t5
OR
ciscoiosMatch15.1\(1\)xb
OR
ciscoiosMatch15.1\(1\)xb3
OR
ciscoiosMatch15.1\(1\)xb1
OR
ciscoiosMatch15.1\(1\)xb2
OR
ciscoiosMatch15.1\(4\)xb4
OR
ciscoiosMatch15.1\(4\)xb5
OR
ciscoiosMatch15.1\(4\)xb6
OR
ciscoiosMatch15.1\(4\)xb5a
OR
ciscoiosMatch15.1\(4\)xb7
OR
ciscoiosMatch15.1\(4\)xb8
OR
ciscoiosMatch15.1\(4\)xb8a
OR
ciscoiosMatch15.3\(1\)t
OR
ciscoiosMatch15.3\(2\)t
OR
ciscoiosMatch15.3\(1\)t1
OR
ciscoiosMatch15.3\(1\)t2
OR
ciscoiosMatch15.3\(1\)t3
OR
ciscoiosMatch15.3\(1\)t4
OR
ciscoiosMatch15.3\(2\)t1
OR
ciscoiosMatch15.3\(2\)t2
OR
ciscoiosMatch15.3\(2\)t3
OR
ciscoiosMatch15.1\(4\)m3
OR
ciscoiosMatch15.1\(4\)m
OR
ciscoiosMatch15.1\(4\)m1
OR
ciscoiosMatch15.1\(4\)m2
OR
ciscoiosMatch15.1\(4\)m6
OR
ciscoiosMatch15.1\(4\)m5
OR
ciscoiosMatch15.1\(4\)m4
OR
ciscoiosMatch15.1\(4\)m0a
OR
ciscoiosMatch15.1\(4\)m0b
OR
ciscoiosMatch15.1\(4\)m7
OR
ciscoiosMatch15.1\(4\)m3a
OR
ciscoiosMatch15.1\(4\)m8
OR
ciscoiosMatch15.1\(2\)gc
OR
ciscoiosMatch15.1\(2\)gc1
OR
ciscoiosMatch15.1\(2\)gc2
OR
ciscoiosMatch15.1\(4\)gc
OR
ciscoiosMatch15.1\(4\)gc1
OR
ciscoiosMatch15.2\(4\)m
OR
ciscoiosMatch15.2\(4\)m1
OR
ciscoiosMatch15.2\(4\)m2
OR
ciscoiosMatch15.2\(4\)m4
OR
ciscoiosMatch15.2\(4\)m3
OR
ciscoiosMatch15.2\(4\)m5
OR
ciscoiosMatch15.2\(4\)m6
OR
ciscoiosMatch15.2\(4\)m6b
OR
ciscoiosMatch15.2\(4\)m6a
OR
ciscoiosMatch15.2\(1\)gc
OR
ciscoiosMatch15.2\(1\)gc1
OR
ciscoiosMatch15.2\(1\)gc2
OR
ciscoiosMatch15.2\(2\)gc
OR
ciscoiosMatch15.2\(3\)gc
OR
ciscoiosMatch15.2\(3\)gc1
OR
ciscoiosMatch15.2\(4\)gc
OR
ciscoiosMatch15.2\(4\)gc1
OR
ciscoiosMatch15.2\(4\)gc2
OR
ciscoiosMatch15.4\(1\)t
OR
ciscoiosMatch15.4\(2\)t
OR
ciscoiosMatch15.4\(1\)t1
OR
ciscoiosMatch15.2\(4m\)e1
OR
ciscoiosMatch15.2\(2\)jb1
OR
ciscoiosMatch15.2\(2\)jb
OR
ciscoiosMatch15.2\(2\)jb2
OR
ciscoiosMatch15.2\(4\)jb
OR
ciscoiosMatch15.2\(2\)jb3
OR
ciscoiosMatch15.2\(4\)jb1
OR
ciscoiosMatch15.2\(4\)jb2
OR
ciscoiosMatch15.2\(4\)jb3
OR
ciscoiosMatch15.2\(4\)jb3a
OR
ciscoiosMatch15.2\(4\)jb4
OR
ciscoiosMatch15.2\(4\)jb3h
OR
ciscoiosMatch15.2\(4\)jb3b
OR
ciscoiosMatch15.2\(4\)jb3s
OR
ciscoiosMatch15.2\(4\)jb5h
OR
ciscoiosMatch15.2\(4\)jb5
OR
ciscoiosMatch15.2\(4\)jb5m
OR
ciscoiosMatch15.2\(2\)jax
OR
ciscoiosMatch15.3\(3\)m
OR
ciscoiosMatch15.3\(3\)m1
OR
ciscoiosMatch15.3\(3\)m2
OR
ciscoiosMatch15.2\(2\)jn1
OR
ciscoiosMatch15.2\(2\)jn2
OR
ciscoiosMatch15.2\(4\)jn
OR
ciscoiosMatch15.2\(4\)jaz
OR
ciscoiosMatch15.2\(4\)jaz1
OR
ciscoiosMatch15.3\(3\)xb12
OR
ciscoiosMatch15.4\(1\)cg
OR
ciscoiosMatch15.4\(1\)cg1
OR
ciscoiosMatch15.4\(2\)cg
OR
ciscoiosMatch15.3\(3\)ja8
OR
ciscoiosMatch15.6\(2\)t
VendorProductVersionCPE
ciscoios15.0mcpe:2.3:o:cisco:ios:15.0m:*:*:*:*:*:*:*
ciscoios15.0xacpe:2.3:o:cisco:ios:15.0xa:*:*:*:*:*:*:*
ciscoios15.1tcpe:2.3:o:cisco:ios:15.1t:*:*:*:*:*:*:*
ciscoios15.1xbcpe:2.3:o:cisco:ios:15.1xb:*:*:*:*:*:*:*
ciscoios15.3tcpe:2.3:o:cisco:ios:15.3t:*:*:*:*:*:*:*
ciscoios15.1mcpe:2.3:o:cisco:ios:15.1m:*:*:*:*:*:*:*
ciscoios15.1gccpe:2.3:o:cisco:ios:15.1gc:*:*:*:*:*:*:*
ciscoios15.2mcpe:2.3:o:cisco:ios:15.2m:*:*:*:*:*:*:*
ciscoios15.2gccpe:2.3:o:cisco:ios:15.2gc:*:*:*:*:*:*:*
ciscoios15.4tcpe:2.3:o:cisco:ios:15.4t:*:*:*:*:*:*:*
Rows per page:
1-10 of 1471

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

EPSS

0.012

Percentile

85.1%

Related for CISCO-SA-20140924-NAT