PT-2014-5216 · Cisco · Cisco Ios Xr

Published 2014-07-23 · Updated 2017-01-12 · CVE-2014-3322

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 4.3.2 and earlier

Description The issue is related to improper NetFlow sampling of IP packets, which can be exploited by sending malformed IPv4 or IPv6 packets to cause a denial of service, resulting in chip and card hangs. This can lead to a lockup and eventual reload of a Network Processor chip and a line card, causing a denial of service condition. The vulnerability can be exploited by an unauthenticated, adjacent attacker who is on the same broadcast or collision domain as the targeted device. NetFlow sampling must be configured on the targeted device for the exploit to be successful.

Recommendations For Cisco IOS XR versions 4.3.2 and earlier, update to a newer version that includes the fix for this issue, as confirmed by Cisco in their security notice. As a temporary workaround, consider disabling NetFlow sampling until a patch is available. Restrict access to the device to minimize the risk of exploitation, ensuring that only trusted devices are on the same broadcast or collision domain.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-3322

Affected Products

Cisco Ios Xr

References · 7

• http://tools.cisco.com/security/center/viewAlert.x?alertId=35009 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3322 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-3322 · Security Note
• http://secunia.com/advisories/60311 · Note
• http://securityfocus.com/bid/68833 · Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140723-CVE-2014-3322 · Note
• http://securitytracker.com/id/1030623 · Note