PT-2014-5167 · Cisco · Cisco Ios Xr

Published 2014-05-20 · Updated 2016-09-07 · CVE-2014-3271

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS XR (affected versions not specified)

Description The issue is related to the DHCPv6 implementation, which allows remote attackers to cause a denial of service by sending a malformed packet. This is due to incorrect handling of such packets. An attacker could exploit this by sending a malformed DHCPv6 packet to a device configured with DHCPv6 server functionality, potentially causing the DHCPv6 process to crash. The attack may require access to internal networks and the device must be configured with DHCPv6 server functionality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-3271

Affected Products

Cisco Ios Xr

References · 4

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3271 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-3271 · Security Note
• http://securitytracker.com/id/1030259 · Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140520-CVE-2014-3271 · Note