Lucene search
HistoryOct 25, 2014 - 10:55 a.m.
CVE-2014-3409
CVSS2
6.1
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.6
Confidence
High
EPSS
0.009
Percentile
82.5%
The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device reload) via malformed CFM packets, aka Bug ID CSCuq93406.
Affected configurations
Node
ciscoiosRange≤12.2\(33\)sre9a
ORciscoios_xeRange≤3.13s
Related
cvelist
cvelist
CVE-2014-3409
2014-10-25 10:00:00
prion
prion
Command injection
2014-10-25 10:55:00
cve
cve
CVE-2014-3409
2014-10-25 10:55:05
nessus
nessus
Cisco IOS Software Ethernet Connectivity Fault Management (CFM) DoS
2014-11-07 00:00:00
Cisco IOS XE Software Connectivity Fault Management (CFM) DoS
2014-11-07 00:00:00
CVSS2
6.1
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.6
Confidence
High
EPSS
0.009
Percentile
82.5%
Related for NVD:CVE-2014-3409