Lucene search

CiscoCISCO-SA-20140806-ENERGYWISE

HistoryAug 06, 2014 - 4:00 p.m.

Cisco IOS Software and Cisco IOS XE Software EnergyWise Crafted Packet Denial of Service Vulnerability

2014-08-0616:00:00

tools.cisco.com

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

EPSS

0.009

Percentile

82.3%

JSON

A vulnerability in the EnergyWise module of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of the affected device.

The vulnerability is due to improper parsing of crafted EnergyWise packets destined to an affected device. An attacker could exploit this vulnerability by sending a crafted EnergyWise packet to be processed by an affected device. An exploit could allow the attacker to cause a reload of the affected device.

Cisco has released software updates that address this vulnerability.

There are no workarounds for this vulnerability.

This advisory is available at the following link:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140806-energywise[“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140806-energywise”]

Affected configurations

Vulners

Node

ciscoiosMatch12.2se

ciscoiosMatch12.2ex

ciscoiosMatch12.2ey

ciscoiosMatch12.2ez

ciscoiosMatch15.0se

ciscoiosMatch15.1sg

ciscoiosMatch15.0ex

ciscoiosMatch15.1sy

ciscoiosMatch15.2e

ciscoiosMatch15.0ez

ciscoiosMatch15.2sc

ciscoiosMatch15.0ej

ciscoiosMatch15.0ek

ciscocisco_iosMatch3.7sxe

ciscocisco_iosMatch3.3sgxe

ciscocisco_iosMatch3.3xoxe

ciscocisco_iosMatch3.4sgxe

ciscocisco_iosMatch3.5exe

ciscocisco_iosMatch3.10sxe

ciscocisco_iosMatch3.12sxe

ciscocisco_iosMatch3.6exe

ciscoiosMatch12.2\(58\)se

ciscoiosMatch12.2\(58\)se1

ciscoiosMatch12.2\(58\)se2

ciscoiosMatch12.2\(55\)ex3

ciscoiosMatch12.2\(58\)ex

ciscoiosMatch12.2\(58\)ey

ciscoiosMatch12.2\(58\)ey1

ciscoiosMatch12.2\(58\)ey2

ciscoiosMatch12.2\(58\)ez

ciscoiosMatch12.2\(60\)ez

ciscoiosMatch12.2\(60\)ez1

ciscoiosMatch12.2\(60\)ez2

ciscoiosMatch12.2\(60\)ez3

ciscoiosMatch12.2\(60\)ez4

ciscoiosMatch12.2\(60\)ez5

ciscoiosMatch15.0\(1\)se

ciscoiosMatch15.0\(2\)se

ciscoiosMatch15.0\(1\)se1

ciscoiosMatch15.0\(1\)se2

ciscoiosMatch15.0\(1\)se3

ciscoiosMatch15.0\(2\)se1

ciscoiosMatch15.0\(2\)se2

ciscoiosMatch15.0\(2\)se3

ciscoiosMatch15.0\(2\)se4

ciscoiosMatch15.0\(2\)se5

ciscoiosMatch15.0\(2\)se6

ciscoiosMatch15.1\(1\)sg

ciscoiosMatch15.1\(2\)sg

ciscoiosMatch15.1\(1\)sg1

ciscoiosMatch15.1\(1\)sg2

ciscoiosMatch15.1\(2\)sg1

ciscoiosMatch15.1\(2\)sg2

ciscoiosMatch15.1\(2\)sg3

ciscoiosMatch15.1\(2\)sg4

ciscoiosMatch15.0\(2\)ex

ciscoiosMatch15.0\(2\)ex1

ciscoiosMatch15.0\(2\)ex2

ciscoiosMatch15.0\(2\)ex3

ciscoiosMatch15.0\(2\)ex4

ciscoiosMatch15.0\(2\)ex5

ciscoiosMatch15.0\(2\)ex6

ciscoiosMatch15.1\(1\)sy

ciscoiosMatch15.1\(1\)sy1

ciscoiosMatch15.1\(2\)sy

ciscoiosMatch15.1\(2\)sy1

ciscoiosMatch15.1\(2\)sy2

ciscoiosMatch15.1\(1\)sy2

ciscoiosMatch15.1\(1\)sy3

ciscoiosMatch15.1\(2\)sy3

ciscoiosMatch15.2\(1\)e

ciscoiosMatch15.2\(2\)e

ciscoiosMatch15.2\(1\)e1

ciscoiosMatch15.2\(1\)e2

ciscoiosMatch15.2\(1\)e3

ciscoiosMatch15.0\(2\)ez

ciscoiosMatch15.2\(2\)sc3

ciscoiosMatch15.0\(2\)ej

ciscoiosMatch15.0\(2\)ej1

ciscoiosMatch15.0\(2\)ek

ciscoiosMatch15.0\(2\)ek1

ciscocisco_iosMatch3.7.7sxe

ciscocisco_iosMatch3.3.0sgxe

ciscocisco_iosMatch3.3.2sgxe

ciscocisco_iosMatch3.3.1sgxe

ciscocisco_iosMatch3.3.0xoxe

ciscocisco_iosMatch3.3.1xoxe

ciscocisco_iosMatch3.3.2xoxe

ciscocisco_iosMatch3.4.0sgxe

ciscocisco_iosMatch3.4.2sgxe

ciscocisco_iosMatch3.4.1sgxe

ciscocisco_iosMatch3.4.3sgxe

ciscocisco_iosMatch3.4.4sgxe

ciscocisco_iosMatch3.5.0exe

ciscocisco_iosMatch3.5.1exe

ciscocisco_iosMatch3.5.2exe

ciscocisco_iosMatch3.5.3exe

ciscocisco_iosMatch3.10.4sxe

ciscocisco_iosMatch3.12.0asxe

ciscocisco_iosMatch3.6.0exe

ciscocisco_iosMatch3.6.0aexe

VendorProductVersionCPE
ciscoios12.2secpe:2.3:o:cisco:ios:12.2se:*:*:*:*:*:*:*
ciscoios12.2excpe:2.3:o:cisco:ios:12.2ex:*:*:*:*:*:*:*
ciscoios12.2eycpe:2.3:o:cisco:ios:12.2ey:*:*:*:*:*:*:*
ciscoios12.2ezcpe:2.3:o:cisco:ios:12.2ez:*:*:*:*:*:*:*
ciscoios15.0secpe:2.3:o:cisco:ios:15.0se:*:*:*:*:*:*:*
ciscoios15.1sgcpe:2.3:o:cisco:ios:15.1sg:*:*:*:*:*:*:*
ciscoios15.0excpe:2.3:o:cisco:ios:15.0ex:*:*:*:*:*:*:*
ciscoios15.1sycpe:2.3:o:cisco:ios:15.1sy:*:*:*:*:*:*:*
ciscoios15.2ecpe:2.3:o:cisco:ios:15.2e:*:*:*:*:*:*:*
ciscoios15.0ezcpe:2.3:o:cisco:ios:15.0ez:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios	12.2se	cpe:2.3:o:cisco:ios:12.2se:::::::*
cisco	ios	12.2ex	cpe:2.3:o:cisco:ios:12.2ex:::::::*
cisco	ios	12.2ey	cpe:2.3:o:cisco:ios:12.2ey:::::::*
cisco	ios	12.2ez	cpe:2.3:o:cisco:ios:12.2ez:::::::*
cisco	ios	15.0se	cpe:2.3:o:cisco:ios:15.0se:::::::*
cisco	ios	15.1sg	cpe:2.3:o:cisco:ios:15.1sg:::::::*
cisco	ios	15.0ex	cpe:2.3:o:cisco:ios:15.0ex:::::::*
cisco	ios	15.1sy	cpe:2.3:o:cisco:ios:15.1sy:::::::*
cisco	ios	15.2e	cpe:2.3:o:cisco:ios:15.2e:::::::*
cisco	ios	15.0ez	cpe:2.3:o:cisco:ios:15.0ez:::::::*