Lucene search

CiscoCVE-2014-3353

HistorySep 04, 2014 - 10:55 a.m.

CVE-2014-3353

2014-09-0410:55:07

CWE-399

cisco

web.nvd.nist.gov

cisco

ios xr

denial of service

vulnerability

cve-2014-3353

nvd

bug id cscuo95165

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.02

Percentile

88.9%

JSON

Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet, aka Bug ID CSCuo95165.

Affected configurations

Nvd

Node

ciscoios_xrRange≤4.3.2

ciscoios_xrMatch4.3.0

ciscoios_xrMatch4.3.1

VendorProductVersionCPE
ciscoios_xr*cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*
ciscoios_xr4.3.0cpe:2.3:o:cisco:ios_xr:4.3.0:*:*:*:*:*:*:*
ciscoios_xr4.3.1cpe:2.3:o:cisco:ios_xr:4.3.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xr	*	cpe:2.3:o:cisco:ios_xr::::::::
cisco	ios_xr	4.3.0	cpe:2.3:o:cisco:ios_xr:4.3.0:::::::*
cisco	ios_xr	4.3.1	cpe:2.3:o:cisco:ios_xr:4.3.1:::::::*

References

secunia.com/advisories/60205

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3353

tools.cisco.com/security/center/viewAlert.x?alertId=35559

www.securityfocus.com/bid/69506

www.securitytracker.com/id/1030790

exchange.xforce.ibmcloud.com/vulnerabilities/95623

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

AI Score

6.8

Confidence

High

EPSS

0.02

Percentile

88.9%

JSON

Related for CVE-2014-3353