Unscored CVE-2014-3309 EUVD-2014-3322GHSA-xrcg-wf6c-6jc9

The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, wh…

Published Jul 9, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318.

References

1030549 vdb-entry
20140708 Cisco IOS Software and Cisco IOS XE Software NTP Access Group Vulnerability vendor-advisory
68463 vdb-entry
ciscoios-cve20143309-info-disc(94420) vdb-entry