VulnerabilityModified
CVE-2014-3322
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service (chip and card hangs) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID…
MEDIUM 6.1EPSS 1.21%
Does this matter?
Lower severity and a low EPSS score (1.21%). Track it; it rarely justifies an emergency change on its own.
Description
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service (chip and card hangs) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCuo68417.
- CVSS 2.0
- 6.1 MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 1.21% probability · 67th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/ios xr · cisco/asr 9000 rsp440 router · cisco/asr 9001 · cisco/asr 9006 · cisco/asr 9010 · cisco/asr 9904 · cisco/asr 9912 · cisco/asr 9922
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/60311
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3322Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35009Vendor Advisory
- http://www.securityfocus.com/bid/68833Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030623Third Party Advisory, VDB Entry
- http://secunia.com/advisories/60311
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3322Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35009Vendor Advisory
- http://www.securityfocus.com/bid/68833Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030623Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.