PT-2014-5188 · Cisco · Asr901+1

Published 2014-10-28 · Updated 2017-08-29 · CVE-2014-3293

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS version 15.4(3)S0b on ASR901 devices

Description The issue allows remote attackers to cause a denial of service, specifically BGP neighbor flapping, by sending many crafted IPv4 packets. This occurs because the software makes incorrect decisions to use the CPU for IPv4 packet processing.

Recommendations For Cisco IOS version 15.4(3)S0b on ASR901 devices, consider applying configuration changes to limit the impact of crafted IPv4 packets on CPU usage until a fix is available. Restrict access to the network to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2014-3293

Affected Products

Asr901

Cisco Ios

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2014-3293 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=36195 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3293 · Vendor Advisory
• http://secunia.com/advisories/61830 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/97769 · Note
• http://securityfocus.com/bid/70744 · Note
• http://securitytracker.com/id/1031122 · Note