Unscored CVE-2014-3276 EUVD-2014-3289GHSA-wg88-5525-mfh3

Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted R…

Published May 23, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices, which allows remote authenticated users to cause a denial of service (RADIUS outage) by sourcing these packets from two origins, aka Bug ID CSCuo56780.

References

20140521 Cisco ISE RADIUS Service Denial of Service Vulnerability vendor-advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34329
1030274 vdb-entry