Lucene search

[email protected]CVE-2014-3331

HistoryAug 20, 2014 - 11:17 a.m.

CVE-2014-3331

2014-08-2011:17:14

CWE-20

[email protected]

web.nvd.nist.gov

cve-2014-3331

denial of service

cisco

asr 5000

security vulnerability

nvd

bug id cscuo21914

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.5%

JSON

The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11.0, 12.0, 12.1, 12.2, 14.0, 15.0, 16.x through 16.1.2, and 17.0 allows remote attackers to cause a denial of service (process crash) via a crafted TCP packet, aka Bug ID CSCuo21914.

Affected configurations

NVD

Node

ciscoasr_5000_series_softwareMatch11.0

ciscoasr_5000_series_softwareMatch12.0

ciscoasr_5000_series_softwareMatch12.1

ciscoasr_5000_series_softwareMatch12.2

ciscoasr_5000_series_softwareMatch14.0

ciscoasr_5000_series_softwareMatch15.0

ciscoasr_5000_series_softwareMatch16.1.0

ciscoasr_5000_series_softwareMatch16.1.1

ciscoasr_5000_series_softwareMatch16.1.2

ciscoasr_5000_series_softwareMatch17.0.0

CPENameOperatorVersion
cisco:asr_5000_series_softwarecisco asr 5000 series softwareeq11.0
cisco:asr_5000_series_softwarecisco asr 5000 series softwareeq12.0
cisco:asr_5000_series_softwarecisco asr 5000 series softwareeq12.1
cisco:asr_5000_series_softwarecisco asr 5000 series softwareeq12.2
cisco:asr_5000_series_softwarecisco asr 5000 series softwareeq14.0
cisco:asr_5000_series_softwarecisco asr 5000 series softwareeq15.0
cisco:asr_5000_series_softwarecisco asr 5000 series softwareeq16.1.0
cisco:asr_5000_series_softwarecisco asr 5000 series softwareeq16.1.1
cisco:asr_5000_series_softwarecisco asr 5000 series softwareeq16.1.2
cisco:asr_5000_series_softwarecisco asr 5000 series softwareeq17.0.0

CPE	Name	Operator	Version
cisco:asr_5000_series_software	cisco asr 5000 series software	eq	11.0
cisco:asr_5000_series_software	cisco asr 5000 series software	eq	12.0
cisco:asr_5000_series_software	cisco asr 5000 series software	eq	12.1
cisco:asr_5000_series_software	cisco asr 5000 series software	eq	12.2
cisco:asr_5000_series_software	cisco asr 5000 series software	eq	14.0
cisco:asr_5000_series_software	cisco asr 5000 series software	eq	15.0
cisco:asr_5000_series_software	cisco asr 5000 series software	eq	16.1.0
cisco:asr_5000_series_software	cisco asr 5000 series software	eq	16.1.1
cisco:asr_5000_series_software	cisco asr 5000 series software	eq	16.1.2
cisco:asr_5000_series_software	cisco asr 5000 series software	eq	17.0.0

References

secunia.com/advisories/60706

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3331

tools.cisco.com/security/center/viewAlert.x?alertId=35346

www.securityfocus.com/bid/69281

www.securitytracker.com/id/1030747

exchange.xforce.ibmcloud.com/vulnerabilities/95357

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.022 Low

EPSS

Percentile

89.5%

JSON

Related for CVE-2014-3331

cvelist1 prion1 cisco1 nvd1