PT-2014-4496 · Cisco · Cisco Ios

Publicado 2014-03-29 · Atualizado 2014-03-31 · CVE-2014-2131

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Média

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending a series of Virtual Switching Systems (VSS) or Bidirectional Forwarding Detection (BFD) packets. This is due to how the packet driver code handles packets that belong to protocols engaging high priority queues, such as VSS or BFD. An attacker could exploit this by sending a number of BFD or VSS packets to an affected device, leading to a reload and a denial of service condition. The attacker needs access to the same broadcast or collision domain as the targeted device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2014-2131

Produtos afetados

Cisco Ios

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-2131 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2131 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140331-CVE-2014-2131 · Nota