Lucene search
HistoryJul 07, 2014 - 11:01 a.m.
CVE-2014-3308
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
AI Score
6.6
Confidence
High
EPSS
0.008
Percentile
81.3%
Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets, aka Bug ID CSCun83985.
Affected configurations
Node
ciscoios_xr
ciscoasr_9000_rsp440_routerMatch-
ORciscoasr_9001Match-
ORciscoasr_9006Match-
ORciscoasr_9010Match-
ORciscoasr_9904Match-
ORciscoasr_9912Match-
ORciscoasr_9922Match-
Related
cvelist
cvelist
CVE-2014-3308
2014-07-07 10:00:00
cve
cve
CVE-2014-3308
2014-07-07 11:01:30
cisco
cisco
Cisco IOS XR Software Punt Policer Denial of Service Vulnerability
2014-07-08 13:51:17
prion
prion
Design/Logic Flaw
2014-07-07 11:01:00
nessus
nessus
Cisco IOS XR Software Static Punt Policer DoS (CSCun83985)
2014-08-07 00:00:00
CVSS2
6.4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
AI Score
6.6
Confidence
High
EPSS
0.008
Percentile
81.3%
Related for NVD:CVE-2014-3308