Unscored CVE-2014-3409 EUVD-2014-3422GHSA-r34f-j2xr-9cv9

The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allow…

Published Oct 25, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device reload) via malformed CFM packets, aka Bug ID CSCuq93406.

References

61799 third-party-advisory
1031119 vdb-entry
70715 vdb-entry
20141024 Cisco IOS and IOS XE Software Ethernet Connectivity Fault Management Vulnerability vendor-advisory
ciscoios-xe-cve20143409-dos(97758) vdb-entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=36184