Lucene search
CiscoCISCO-SA-20140924-SIPHistorySep 24, 2014 - 4:00 p.m.
Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability
2014-09-2416:00:00
tools.cisco.com
21
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
0.012
Percentile
84.9%
A vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device. To exploit this vulnerability, affected devices must be configured to process SIP messages.
Cisco has released software updates that address this vulnerability.
There are no workarounds for devices that must run SIP; however, mitigations are available to limit exposure to this vulnerability.
This advisory is available at the following link:
Note: The September 24, 2014, Cisco IOS Software Security Advisory bundled publication includes six Cisco Security Advisories. All advisories address vulnerabilities in Cisco IOS Software. Individual publication links are in Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication at the following link:
http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep14.html[“http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep14.html”]
Affected configurations
Node
ciscoiosMatch12.4t
ORciscoiosMatch15.0m
ORciscoiosMatch15.0xa
ORciscoiosMatch15.1t
ORciscoiosMatch15.1xb
ORciscoiosMatch15.0s
ORciscoiosMatch15.2s
ORciscoiosMatch15.3t
ORciscoiosMatch15.1s
ORciscoiosMatch15.1m
ORciscoiosMatch15.1gc
ORciscoiosMatch15.2m
ORciscoiosMatch15.2gc
ORciscoiosMatch15.3s
ORciscoiosMatch15.4t
ORciscoiosMatch15.4s
ORciscoiosMatch15.3m
ORciscoiosMatch15.2sc
ORciscoiosMatch15.2jaz
ORciscoiosMatch15.3xb
ORciscoiosMatch15.4cg
ORciscoiosMatch15.1svs
ORciscoiosMatch15.1svt
ORciscoiosMatch15.1svu
ORciscoiosMatch15.1svv
ORciscoiosMatch15.1svw
ORciscoiosMatch15.1svx
ORciscocisco_iosMatch3.7sxe
ORciscocisco_iosMatch3.8sxe
ORciscocisco_iosMatch3.9sxe
ORciscocisco_iosMatch3.10sxe
ORciscocisco_iosMatch3.11sxe
ORciscoiosMatch12.4\(24\)t
ORciscoiosMatch12.4\(24\)t3
ORciscoiosMatch12.4\(22\)t1
ORciscoiosMatch12.4\(24\)t5
ORciscoiosMatch12.4\(24\)t4
ORciscoiosMatch12.4\(22\)t
ORciscoiosMatch12.4\(24\)t8
ORciscoiosMatch12.4\(24\)t2
ORciscoiosMatch12.4\(22\)t5
ORciscoiosMatch12.4\(22\)t4
ORciscoiosMatch12.4\(24\)t1
ORciscoiosMatch12.4\(24\)t7
ORciscoiosMatch12.4\(22\)t3
ORciscoiosMatch12.4\(24\)t6
ORciscoiosMatch12.4\(22\)t2
ORciscoiosMatch12.4\(24\)t9
ORciscoiosMatch12.4\(24\)t10
ORciscoiosMatch12.4\(24\)t11
ORciscoiosMatch15.0\(1\)m1
ORciscoiosMatch15.0\(1\)m5
ORciscoiosMatch15.0\(1\)m4
ORciscoiosMatch15.0\(1\)m3
ORciscoiosMatch15.0\(1\)m2
ORciscoiosMatch15.0\(1\)m6
ORciscoiosMatch15.0\(1\)m
ORciscoiosMatch15.0\(1\)m7
ORciscoiosMatch15.0\(1\)m10
ORciscoiosMatch15.0\(1\)m9
ORciscoiosMatch15.0\(1\)m8
ORciscoiosMatch15.0\(1\)xa2
ORciscoiosMatch15.0\(1\)xa4
ORciscoiosMatch15.0\(1\)xa1
ORciscoiosMatch15.0\(1\)xa3
ORciscoiosMatch15.0\(1\)xa
ORciscoiosMatch15.0\(1\)xa5
ORciscoiosMatch15.1\(2\)t
ORciscoiosMatch15.1\(1\)t4
ORciscoiosMatch15.1\(3\)t2
ORciscoiosMatch15.1\(1\)t1
ORciscoiosMatch15.1\(2\)t0a
ORciscoiosMatch15.1\(3\)t3
ORciscoiosMatch15.1\(1\)t3
ORciscoiosMatch15.1\(2\)t3
ORciscoiosMatch15.1\(2\)t4
ORciscoiosMatch15.1\(1\)t2
ORciscoiosMatch15.1\(3\)t
ORciscoiosMatch15.1\(2\)t2a
ORciscoiosMatch15.1\(3\)t1
ORciscoiosMatch15.1\(1\)t
ORciscoiosMatch15.1\(2\)t2
ORciscoiosMatch15.1\(2\)t1
ORciscoiosMatch15.1\(2\)t5
ORciscoiosMatch15.1\(3\)t4
ORciscoiosMatch15.1\(1\)t5
ORciscoiosMatch15.1\(1\)xb
ORciscoiosMatch15.1\(1\)xb3
ORciscoiosMatch15.1\(1\)xb1
ORciscoiosMatch15.1\(1\)xb2
ORciscoiosMatch15.1\(4\)xb4
ORciscoiosMatch15.1\(4\)xb5
ORciscoiosMatch15.1\(4\)xb6
ORciscoiosMatch15.1\(4\)xb5a
ORciscoiosMatch15.1\(4\)xb7
ORciscoiosMatch15.1\(4\)xb8
ORciscoiosMatch15.1\(4\)xb8a
ORciscoiosMatch15.0\(1\)s2
ORciscoiosMatch15.0\(1\)s1
ORciscoiosMatch15.0\(1\)s
ORciscoiosMatch15.0\(1\)s4
ORciscoiosMatch15.2\(1\)s
ORciscoiosMatch15.2\(2\)s
ORciscoiosMatch15.2\(1\)s1
ORciscoiosMatch15.2\(4\)s
ORciscoiosMatch15.2\(1\)s2
ORciscoiosMatch15.2\(2\)s1
ORciscoiosMatch15.2\(4\)s1
ORciscoiosMatch15.2\(4\)s4a
ORciscoiosMatch15.3\(1\)t
ORciscoiosMatch15.3\(2\)t
ORciscoiosMatch15.3\(1\)t1
ORciscoiosMatch15.3\(1\)t2
ORciscoiosMatch15.3\(1\)t3
ORciscoiosMatch15.3\(1\)t4
ORciscoiosMatch15.3\(2\)t1
ORciscoiosMatch15.3\(2\)t2
ORciscoiosMatch15.3\(2\)t3
ORciscoiosMatch15.1\(2\)s
ORciscoiosMatch15.1\(1\)s
ORciscoiosMatch15.1\(1\)s1
ORciscoiosMatch15.1\(3\)s
ORciscoiosMatch15.1\(1\)s2
ORciscoiosMatch15.1\(2\)s1
ORciscoiosMatch15.1\(2\)s2
ORciscoiosMatch15.1\(3\)s1
ORciscoiosMatch15.1\(3\)s0a
ORciscoiosMatch15.1\(3\)s2
ORciscoiosMatch15.1\(3\)s4
ORciscoiosMatch15.1\(3\)s3
ORciscoiosMatch15.1\(3\)s5
ORciscoiosMatch15.1\(3\)s7
ORciscoiosMatch15.1\(4\)m3
ORciscoiosMatch15.1\(4\)m
ORciscoiosMatch15.1\(4\)m1
ORciscoiosMatch15.1\(4\)m2
ORciscoiosMatch15.1\(4\)m6
ORciscoiosMatch15.1\(4\)m5
ORciscoiosMatch15.1\(4\)m4
ORciscoiosMatch15.1\(4\)m0a
ORciscoiosMatch15.1\(4\)m0b
ORciscoiosMatch15.1\(4\)m7
ORciscoiosMatch15.1\(4\)m3a
ORciscoiosMatch15.1\(4\)m8
ORciscoiosMatch15.1\(2\)gc
ORciscoiosMatch15.1\(2\)gc1
ORciscoiosMatch15.1\(2\)gc2
ORciscoiosMatch15.1\(4\)gc
ORciscoiosMatch15.1\(4\)gc1
ORciscoiosMatch15.2\(4\)m
ORciscoiosMatch15.2\(4\)m1
ORciscoiosMatch15.2\(4\)m2
ORciscoiosMatch15.2\(4\)m4
ORciscoiosMatch15.2\(4\)m3
ORciscoiosMatch15.2\(4\)m5
ORciscoiosMatch15.2\(4\)m6
ORciscoiosMatch15.2\(4\)m6b
ORciscoiosMatch15.2\(4\)m6a
ORciscoiosMatch15.2\(1\)gc
ORciscoiosMatch15.2\(1\)gc1
ORciscoiosMatch15.2\(1\)gc2
ORciscoiosMatch15.2\(2\)gc
ORciscoiosMatch15.2\(3\)gc
ORciscoiosMatch15.2\(3\)gc1
ORciscoiosMatch15.2\(4\)gc
ORciscoiosMatch15.2\(4\)gc1
ORciscoiosMatch15.2\(4\)gc2
ORciscoiosMatch15.3\(1\)s
ORciscoiosMatch15.3\(2\)s
ORciscoiosMatch15.3\(3\)s
ORciscoiosMatch15.3\(1\)s2
ORciscoiosMatch15.3\(2\)s2
ORciscoiosMatch15.3\(2\)s1
ORciscoiosMatch15.3\(3\)s1
ORciscoiosMatch15.3\(3\)s2
ORciscoiosMatch15.3\(3\)s3
ORciscoiosMatch15.4\(1\)t
ORciscoiosMatch15.4\(1\)t1
ORciscoiosMatch15.4\(1\)s
ORciscoiosMatch15.3\(3\)m
ORciscoiosMatch15.3\(3\)m1
ORciscoiosMatch15.3\(3\)m2
ORciscoiosMatch15.3\(3\)m3
ORciscoiosMatch15.2\(2\)sc3
ORciscoiosMatch15.2\(4\)jaz1
ORciscoiosMatch15.3\(3\)xb12
ORciscoiosMatch15.4\(1\)cg
ORciscoiosMatch15.1\(3\)svs
ORciscoiosMatch15.1\(3\)svt1
ORciscoiosMatch15.1\(3\)svt3
ORciscoiosMatch15.1\(3\)svt4
ORciscoiosMatch15.1\(3\)svu1
ORciscoiosMatch15.1\(3\)svu10
ORciscoiosMatch15.1\(3\)svu2
ORciscoiosMatch15.1\(3\)svu11
ORciscoiosMatch15.1\(3\)svu21
ORciscoiosMatch15.1\(3\)svv1
ORciscoiosMatch15.1\(3\)svv2
ORciscoiosMatch15.1\(3\)svv3
ORciscoiosMatch15.1\(3\)svv4
ORciscoiosMatch15.1\(3\)svw
ORciscoiosMatch15.1\(3\)svw1
ORciscoiosMatch15.1\(3\)svx
ORciscoiosMatch15.1\(3\)svx1
ORciscocisco_iosMatch3.7.0sxe
ORciscocisco_iosMatch3.7.1sxe
ORciscocisco_iosMatch3.7.2sxe
ORciscocisco_iosMatch3.7.3sxe
ORciscocisco_iosMatch3.7.4sxe
ORciscocisco_iosMatch3.7.5sxe
ORciscocisco_iosMatch3.7.4asxe
ORciscocisco_iosMatch3.7.2tsxe
ORciscocisco_iosMatch3.7.0bsxe
ORciscocisco_iosMatch3.8.0sxe
ORciscocisco_iosMatch3.8.1sxe
ORciscocisco_iosMatch3.8.2sxe
ORciscocisco_iosMatch3.9.1sxe
ORciscocisco_iosMatch3.9.0sxe
ORciscocisco_iosMatch3.9.2sxe
ORciscocisco_iosMatch3.9.0asxe
ORciscocisco_iosMatch3.10.0sxe
ORciscocisco_iosMatch3.10.1sxe
ORciscocisco_iosMatch3.10.2sxe
ORciscocisco_iosMatch3.10.3sxe
ORciscocisco_iosMatch3.10.2asxe
ORciscocisco_iosMatch3.10.2tsxe
ORciscocisco_iosMatch3.11.1sxe
ORciscocisco_iosMatch3.11.2sxe
ORciscocisco_iosMatch3.11.0sxe
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | ios | 12.4t | cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:* |
| cisco | ios | 15.0m | cpe:2.3:o:cisco:ios:15.0m:*:*:*:*:*:*:* |
| cisco | ios | 15.0xa | cpe:2.3:o:cisco:ios:15.0xa:*:*:*:*:*:*:* |
| cisco | ios | 15.1t | cpe:2.3:o:cisco:ios:15.1t:*:*:*:*:*:*:* |
| cisco | ios | 15.1xb | cpe:2.3:o:cisco:ios:15.1xb:*:*:*:*:*:*:* |
| cisco | ios | 15.0s | cpe:2.3:o:cisco:ios:15.0s:*:*:*:*:*:*:* |
| cisco | ios | 15.2s | cpe:2.3:o:cisco:ios:15.2s:*:*:*:*:*:*:* |
| cisco | ios | 15.3t | cpe:2.3:o:cisco:ios:15.3t:*:*:*:*:*:*:* |
| cisco | ios | 15.1s | cpe:2.3:o:cisco:ios:15.1s:*:*:*:*:*:*:* |
| cisco | ios | 15.1m | cpe:2.3:o:cisco:ios:15.1m:*:*:*:*:*:*:* |
Related
nessus
nessus
Cisco IOS XE Software SIP DoS (cisco-sa-20140924-sip)
2014-10-02 00:00:00
Rockwell Automation Stratix 5900 (CVE-2014-3360)
2023-11-15 00:00:00
Cisco IOS Software SIP DoS (cisco-sa-20140924-sip)
2014-10-02 00:00:00
nvd
nvd
CVE-2014-3360
2014-09-25 10:55:08
prion
prion
Design/Logic Flaw
2014-09-25 10:55:00
cve
cve
CVE-2014-3360
2014-09-25 10:55:08
cvelist
cvelist
CVE-2014-3360
2014-09-25 10:00:00
securityvulns
securityvulns
Cisco IOS multiple security vulnerabilities
2014-09-29 00:00:00
ics
ics
Rockwell Automation Stratix 5900
2017-05-10 12:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
0.012
Percentile
84.9%
Related for CISCO-SA-20140924-SIP