VulnerabilityModified
CVE-2014-3409
The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device reload) via malformed CFM packets, aka Bug ID CSCuq93406.
MEDIUM 6.1EPSS 1.01%
Does this matter?
Lower severity and a low EPSS score (1.01%). Track it; it rarely justifies an emergency change on its own.
Description
The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device reload) via malformed CFM packets, aka Bug ID CSCuq93406.
- CVSS 2.0
- 6.1 MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 1.01% probability · 61th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- cisco/ios · cisco/ios xe
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/61799
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3409Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36184Vendor Advisory
- http://www.securityfocus.com/bid/70715Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1031119Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97758
- http://secunia.com/advisories/61799
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3409Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36184Vendor Advisory
- http://www.securityfocus.com/bid/70715Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1031119Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/97758
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.