CVE-2014-3284

Опубликовано: 25 мая 2014

Источник: nvd

CVSS2: 6.1

EPSS Низкий

Описание

Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed PPPoE packet, aka Bug ID CSCuo55180.

Ссылки

http://secunia.com/advisories/58405
Permissions Required
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3284
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34346
Vendor Advisory
http://www.securityfocus.com/bid/67603
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030283
Third Party Advisory
VDB Entry
http://secunia.com/advisories/58405
Permissions Required
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3284
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34346
Vendor Advisory
http://www.securityfocus.com/bid/67603
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1030283
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_1002_fixed_router:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asr_1023_router:-:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00629

Низкий

6.1 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-88gh-c867-76x4

github

больше 3 лет назад