VulnerabilityModified
CVE-2014-3335
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service (chip and card hangs) via a crafted packet,…
MEDIUM 4.6EPSS 1.11%
Does this matter?
Lower severity and a low EPSS score (1.11%). Track it; it rarely justifies an emergency change on its own.
Description
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service (chip and card hangs) via a crafted packet, aka Bug ID CSCup77750.
- CVSS 2.0
- 4.6 MEDIUMAV:A/AC:H/Au:N/C:N/I:N/A:C
- EPSS
- 1.11% probability · 64th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/ios xr · cisco/asr 9000 rsp440 router · cisco/asr 9001 · cisco/asr 9006 · cisco/asr 9010 · cisco/asr 9904 · cisco/asr 9912 · cisco/asr 9922
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/60222
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3335Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35416Vendor Advisory
- http://www.securityfocus.com/bid/69383
- http://www.securitytracker.com/id/1030757
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95443
- http://secunia.com/advisories/60222
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3335Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35416Vendor Advisory
- http://www.securityfocus.com/bid/69383
- http://www.securitytracker.com/id/1030757
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95443
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.