Lucene search

CiscoCVE-2014-2109

HistoryMar 27, 2014 - 9:55 p.m.

CVE-2014-2109

2014-03-2721:55:09

CWE-20

cisco

web.nvd.nist.gov

cisco

ios

tcp

input module

denial of service

vulnerability

cve-2014-2109

nat

cisco bug ids

cscuh33843

cscuj41494

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

56.0%

JSON

The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494.

Affected configurations

Nvd

Node

ciscoiosMatch12.2

ciscoiosMatch12.3

ciscoiosMatch12.4

ciscoiosMatch15.0

ciscoiosMatch15.1

ciscoiosMatch15.2

ciscoiosMatch15.3

ciscoiosMatch15.4

VendorProductVersionCPE
ciscoios12.2cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*
ciscoios12.3cpe:2.3:o:cisco:ios:12.3:*:*:*:*:*:*:*
ciscoios12.4cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*
ciscoios15.0cpe:2.3:o:cisco:ios:15.0:*:*:*:*:*:*:*
ciscoios15.1cpe:2.3:o:cisco:ios:15.1:*:*:*:*:*:*:*
ciscoios15.2cpe:2.3:o:cisco:ios:15.2:*:*:*:*:*:*:*
ciscoios15.3cpe:2.3:o:cisco:ios:15.3:*:*:*:*:*:*:*
ciscoios15.4cpe:2.3:o:cisco:ios:15.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios	12.2	cpe:2.3:o:cisco:ios:12.2:::::::*
cisco	ios	12.3	cpe:2.3:o:cisco:ios:12.3:::::::*
cisco	ios	12.4	cpe:2.3:o:cisco:ios:12.4:::::::*
cisco	ios	15.0	cpe:2.3:o:cisco:ios:15.0:::::::*
cisco	ios	15.1	cpe:2.3:o:cisco:ios:15.1:::::::*
cisco	ios	15.2	cpe:2.3:o:cisco:ios:15.2:::::::*
cisco	ios	15.3	cpe:2.3:o:cisco:ios:15.3:::::::*
cisco	ios	15.4	cpe:2.3:o:cisco:ios:15.4:::::::*