CVE-2014-3353 — Cisco IOS XR vulnerability

CWE-3993 documents3 sources
Severity
7.1HIGHNVD
EPSS
2.4%
top 14.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco IOS XR
Timeline
PublishedSep 4
Latest updateMay 17

Description

Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet, aka Bug ID CSCuo95165.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 8.6 | Impact: 6.9

Affected Packages1 packages

▶NVDcisco/ios_xr4.3.2+2

🔴Vulnerability Details

2
GHSA
GHSA-wpc5-gwcm-286j: Cisco IOS XR 4↗2022-05-17
▶
CVEList
CVE-2014-3353: Cisco IOS XR 4↗2014-09-04
▶
CVE-2014-3353 — Cisco IOS XR vulnerability | cvebase