Unscored severity · published Aug 28, 2014
CVE-2014-3347
Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging…
–
CVSS
1%
EPSS
No
On KEV
Description
Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid state of the hardware encryption module, aka Bug ID CSCul77897.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
1I
1801 Integrated Service Router · Cisco
All versions, or not specified · source: NVD
1I
1802 Integrated Service Router · Cisco
All versions, or not specified · source: NVD
1I
1803 Integrated Service Router · Cisco
All versions, or not specified · source: NVD
1I
1811 Integrated Service Router · Cisco
All versions, or not specified · source: NVD
1I
1812 Integrated Service Router · Cisco
All versions, or not specified · source: NVD
1I
1841 Integrated Service Router · Cisco
All versions, or not specified · source: NVD
1I
1861 Integrated Service Router · Cisco
All versions, or not specified · source: NVD
IO
Ios · Cisco
15.1(4)m2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3347
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3347
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3347
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=35453
www.securityfocus.com
http://www.securityfocus.com/bid/69439
www.securitytracker.com
http://www.securitytracker.com/id/1030772
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95558