CVE-2014-3409

Опубликовано: 25 окт. 2014

Источник: nvd

CVSS2: 6.1

EPSS Низкий

Описание

The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device reload) via malformed CFM packets, aka Bug ID CSCuq93406.

Ссылки

http://secunia.com/advisories/61799
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3409
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=36184
Vendor Advisory
http://www.securityfocus.com/bid/70715
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031119
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/97758
http://secunia.com/advisories/61799
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3409
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=36184
Vendor Advisory
http://www.securityfocus.com/bid/70715
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1031119
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/97758

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*

Версия до 12.2\(33\)sre9a (включая)

cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*

Версия до 3.13s (включая)

EPSS

Процентиль: 79%

0.01275

Низкий

6.1 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-r34f-j2xr-9cv9

github

больше 3 лет назад