CVE-2014-3264
published 2014-05-20CVE-2014-3264: Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) via crafted…
PriorityP428medium6.3CVSS 2.0
AVNACMAuSCNINAC
EPSS
1.18%
64.1th percentile
Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | adaptive_security_appliance_software | <= 9.1\(5\) | — |
CVSS provenance
nvdv2.06.3MEDIUMAV:N/AC:M/Au:S/C:N/I:N/A:C
vendor_cisco6.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-767v-w2p6-p2g2: Cisco Adaptive Security Appliance (ASA) Software 9
ghsa_unreviewed·2022-05-17
CVE-2014-3264 [MEDIUM] CWE-20 GHSA-767v-w2p6-p2g2: Cisco Adaptive Security Appliance (ASA) Software 9
Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to cause a denial of service (device reload) via crafted attributes in a RADIUS packet, aka Bug ID CSCun69561.
Cisco
Cisco Adaptive Security Appliance Software Crafter RADIUS Packets Denial of Service Vulnerability
vendor_cisco·2014-05-19·CVSS 6.3
CVE-2014-3264 [MEDIUM] CWE-20 Cisco Adaptive Security Appliance Software Crafter RADIUS Packets Denial of Service Vulnerability
Cisco Adaptive Security Appliance Software Crafter RADIUS Packets Denial of Service Vulnerability
A vulnerability in the implementation of the Remote Authentication Dial-in User Services (RADIUS) code of Cisco ASA Software could allow an authenticated, remote attacker to cause an affected system to reload.
The vulnerability is due to insufficient validation of RADIUS packets including crafted attributes. An attacker could exploit this vulnerability by sending crafted RADIUS packets to the affected system. The attacker must know the RADIUS shared secret and inject the crafted packet while a RADIUS exchange is in progress.
Cisco has confirmed the vulnerability in a security notice and released software updates.
To exploit this vulnerability, an attacker must authenticate to the targeted
No detection rules found.
No public exploits indexed.
2014-05-20
Published