PT-2014-4496 · Cisco · Cisco Ios

Published 2014-03-29 · Updated 2014-03-31 · CVE-2014-2131

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in a device reload, by sending a series of Virtual Switching Systems (VSS) or Bidirectional Forwarding Detection (BFD) packets. This is due to how the packet driver code handles packets that belong to protocols engaging high priority queues, such as VSS or BFD. An attacker could exploit this by sending a number of BFD or VSS packets to an affected device, leading to a reload and a denial of service condition. The attacker needs access to the same broadcast or collision domain as the targeted device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2014-2131

Affected Products

Cisco Ios

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-2131 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2131 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140331-CVE-2014-2131 · Note