Unscored severity · published Aug 26, 2014
CVE-2014-3335
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service (chip and card hangs) via a crafted packet, aka Bug ID CSCup77750.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
A9
Asr 9000 Rsp440 Router · Cisco
All versions, or not specified · source: NVD
A9
Asr 9001 · Cisco
All versions, or not specified · source: NVD
A9
Asr 9006 · Cisco
All versions, or not specified · source: NVD
A9
Asr 9010 · Cisco
All versions, or not specified · source: NVD
A9
Asr 9904 · Cisco
All versions, or not specified · source: NVD
A9
Asr 9912 · Cisco
All versions, or not specified · source: NVD
A9
Asr 9922 · Cisco
All versions, or not specified · source: NVD
IX
Ios XR · Cisco
through 4.3.2; 4.3.0; 4.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3335
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3335
secunia.com
http://secunia.com/advisories/60222
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3335
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=35416
www.securityfocus.com
http://www.securityfocus.com/bid/69383
www.securitytracker.com
http://www.securitytracker.com/id/1030757
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95443
More from Asr 9000 Rsp440 Router
–
CVE-2014-3396
Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card…
–
CVE-2014-3322
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service (chip and…
–
CVE-2014-3321
Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial of service (chip and…
–
CVE-2014-3308
Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many…
–
CVE-2012-1366
Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device…