Lucene search
HistoryOct 10, 2014 - 1:55 a.m.
CVE-2014-3404
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
49.4%
The Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid message via crafted messages, aka Bug ID CSCuq22677.
Affected configurations
Node
ciscoios_xeMatch-
Related
cve
cve
CVE-2014-3404
2014-10-10 01:55:09
cvelist
cvelist
CVE-2014-3404
2014-10-10 01:00:00
cisco
cisco
prion
prion
Design/Logic Flaw
2014-10-10 01:55:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
6.7
Confidence
High
EPSS
0.001
Percentile
49.4%
Related for NVD:CVE-2014-3404