PT-2014-4494 · Cisco · Cisco Ios

Publicado 2014-03-19 · Atualizado 2017-08-29 · CVE-2014-2124

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.1(2)SY3 and earlier

Description The issue is caused by incorrect processing of multicast traffic, allowing an unauthenticated, remote attacker to crash the device by sending crafted packets. This can lead to a denial of service condition. The vulnerability can be exploited by sending crafted packets to the router. Note that an attacker may need access to trusted, internal networks to send crafted packets to the targeted device.

Recommendations For Cisco IOS versions 15.1(2)SY3 and earlier, update to a newer version that includes the fix for this issue, as confirmed by Cisco in their security notice.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2014-2124

Produtos afetados

Cisco Ios

Referências · 8

• http://securityfocus.com/bid/66301 · Nota
• http://tools.cisco.com/security/center/viewAlert.x?alertId=33413 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/91904 · Nota
• http://securitytracker.com/id/1029942 · Nota
• http://secunia.com/advisories/57515 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2124 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140319-CVE-2014-2124 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2124 · Nota de Segurança