CVE-2014-3354 — Improper Input Validation in Cisco IOS

CWE-20 — Improper Input ValidationCWE-3995 documents5 sources
Severity
7.8HIGHNVD
EPSS
2.5%
top 14.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco IOSCisco IOS XE
Timeline
PublishedSep 25
Latest updateMay 17

Description

Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCui11547.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/ios7 versions+6
▶NVDcisco/ios_xe124 versions+123

🔴Vulnerability Details

2
GHSA
GHSA-2x4f-chgg-6rc3: Cisco IOS 12↗2022-05-17
▶
CVEList
CVE-2014-3354: Cisco IOS 12↗2014-09-25
▶

📋Vendor Advisories

2
CISA ICS
Rockwell Automation Stratix 5900↗2017-05-10
▶
Cisco
Cisco IOS Software RSVP Vulnerability↗2014-09-24
▶
CVE-2014-3354 — Improper Input Validation in Cisco IOS | cvebase