PT-2014-5188 · Cisco · Asr901+1

Publicado 2014-10-28 · Atualizado 2017-08-29 · CVE-2014-3293

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.4(3)S0b on ASR901 devices

Description The issue allows remote attackers to cause a denial of service, specifically BGP neighbor flapping, by sending many crafted IPv4 packets. This occurs because the software makes incorrect decisions to use the CPU for IPv4 packet processing.

Recommendations For Cisco IOS version 15.4(3)S0b on ASR901 devices, consider applying configuration changes to limit the impact of crafted IPv4 packets on CPU usage until a fix is available. Restrict access to the network to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2014-3293

Produtos afetados

Asr901

Cisco Ios

Referências · 7

• http://secunia.com/advisories/61830 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/97769 · Nota
• http://securityfocus.com/bid/70744 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-3293 · Nota de Segurança
• http://tools.cisco.com/security/center/viewAlert.x?alertId=36195 · Aviso do Fabricante
• http://securitytracker.com/id/1031122 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3293 · Aviso do Fabricante