Sign-up

ID

VAR-201408-0153


CVE

CVE-2014-3327


TITLE

Cisco IOS and IOS XE of EnergyWise Service disruption in modules (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2014-003733

DESCRIPTION

The EnergyWise module in Cisco IOS 12.2, 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.2.xXO, 3.3.xSG, 3.4.xSG, and 3.5.xE before 3.5.3E allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 packet, aka Bug ID CSCup52101. Cisco IOS is the interconnected network operating system used on most Cisco system routers and network switches. This issue is being tracked by Cisco Bug ID CSCup52101. https://tools.cisco.com/bugsearch/bug/CSCup52101

Trust: 2.52

sources: NVD: CVE-2014-3327 // JVNDB: JVNDB-2014-003733 // CNVD: CNVD-2014-04856 // BID: 69066 // VULHUB: VHN-71267

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2014-04856

AFFECTED PRODUCTS

vendor:ciscomodel:iosscope:eqversion:15.2

Trust: 2.4

vendor:ciscomodel:iosscope:eqversion:15.1

Trust: 2.4

vendor:ciscomodel:iosscope:eqversion:15.4

Trust: 2.4

vendor:ciscomodel:iosscope:eqversion:15.0

Trust: 1.8

vendor:ciscomodel:iosscope:eqversion:12.2

Trust: 1.8

vendor:ciscomodel:ios xescope:eqversion:3.3.0sg

Trust: 1.6

vendor:ciscomodel:ios xescope:eqversion:3.2.0xo

Trust: 1.6

vendor:ciscomodel:ios xescope:eqversion:3.4.3sg

Trust: 1.6

vendor:ciscomodel:ios xescope:eqversion:3.4.4sg

Trust: 1.6

vendor:ciscomodel:ios xescope:eqversion:3.3.1sg

Trust: 1.6

vendor:ciscomodel:ios xescope:eqversion:3.4.2sg

Trust: 1.6

vendor:ciscomodel:ios xescope:eqversion:3.2.00.xo.15.0\(2\)xo

Trust: 1.6

vendor:ciscomodel:ios xescope:eqversion:3.4.0sg

Trust: 1.0

vendor:ciscomodel:ios xescope:eqversion:3.5.1e

Trust: 1.0

vendor:ciscomodel:ios xescope:eqversion:3.5.0e

Trust: 1.0

vendor:ciscomodel:ios xescope:eqversion:3.5.2e

Trust: 1.0

vendor:ciscomodel:ios xescope:eqversion:3.4.1sg

Trust: 1.0

vendor:ciscomodel:ios xescope:eqversion:3.2.xxo

Trust: 0.8

vendor:ciscomodel:ios xescope:eqversion:3.4.xsg

Trust: 0.8

vendor:ciscomodel:ios xescope:ltversion:3.5.xe

Trust: 0.8

vendor:ciscomodel:ios xescope:eqversion:3.5.3e

Trust: 0.8

vendor:ciscomodel:ios xescope:eqversion:3.3.xsg

Trust: 0.8

vendor:ciscomodel:ios xescope: - version: -

Trust: 0.6

vendor:ciscomodel:iosscope: - version: -

Trust: 0.6

vendor:ciscomodel:ios 15.0sescope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 15.0 se1scope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2sescope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2ezscope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2eyscope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2exscope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 se1scope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 sescope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 ey2scope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 eyscope: - version: -

Trust: 0.3

vendor:ciscomodel:ios 12.2 ex3scope: - version: -

Trust: 0.3

sources: CNVD: CNVD-2014-04856 // BID: 69066 // JVNDB: JVNDB-2014-003733 // CNNVD: CNNVD-201408-098 // NVD: CVE-2014-3327

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2014-3327
value: HIGH

Trust: 1.0

NVD: CVE-2014-3327
value: HIGH

Trust: 0.8

CNVD: CNVD-2014-04856
value: HIGH

Trust: 0.6

CNNVD: CNNVD-201408-098
value: HIGH

Trust: 0.6

VULHUB: VHN-71267
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2014-3327
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2014-04856
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

VULHUB: VHN-71267
severity: HIGH
baseScore: 7.8
vectorString: AV:N/AC:L/AU:N/C:N/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: CNVD: CNVD-2014-04856 // VULHUB: VHN-71267 // JVNDB: JVNDB-2014-003733 // CNNVD: CNNVD-201408-098 // NVD: CVE-2014-3327

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-71267 // JVNDB: JVNDB-2014-003733 // NVD: CVE-2014-3327

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201408-098

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201408-098

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2014-003733

PATCH
title:34962url:http://tools.cisco.com/security/center/viewAMBAlert.x?alertId=34962
Trust: 0.8
title:cisco-sa-20140806-energywiseurl:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140806-energywise
Trust: 0.8
title:35091url:http://tools.cisco.com/security/center/viewAlert.x?alertId=35091
Trust: 0.8
title:cisco-sa-20140806-energywiseurl:http://www.cisco.com/cisco/web/support/JP/112/1122/1122821_cisco-sa-20140806-energywise-j.html
Trust: 0.8
title:Patch for Cisco IOS and IOS XE Software Denial of Service Vulnerabilitiesurl:https://www.cnvd.org.cn/patchInfo/show/48418
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2014-04856 // 
            
            
            
            JVNDB: JVNDB-2014-003733

EXTERNAL IDS
db:NVDid:CVE-2014-3327
Trust: 3.4
db:BIDid:69066
Trust: 2.6
db:SECUNIAid:60650
Trust: 1.7
db:SECTRACKid:1030682
Trust: 1.1
db:JVNDBid:JVNDB-2014-003733
Trust: 0.8
db:CNNVDid:CNNVD-201408-098
Trust: 0.7
db:OSVDBid:109861
Trust: 0.6
db:CNVDid:CNVD-2014-04856
Trust: 0.6
db:VULHUBid:VHN-71267
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2014-04856 // 
            
            
            
            VULHUB: VHN-71267 // 
            
            
            
            BID: 69066 // 
            
            
            
            JVNDB: JVNDB-2014-003733 // 
            
            
            
            CNNVD: CNNVD-201408-098 // 
            
            
            
            NVD: CVE-2014-3327

REFERENCES
url:http://www.securityfocus.com/bid/69066
Trust: 2.3
url:http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20140806-energywise
Trust: 2.3
url:http://secunia.com/advisories/60650
Trust: 1.7
url:http://www.securitytracker.com/id/1030682
Trust: 1.1
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/95137
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2014-3327
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2014-3327
Trust: 0.8
url:http://osvdb.com/show/osvdb/109861
Trust: 0.6
url:http://www.cisco.com/en/us/products/sw/iosswrel/products_ios_cisco_ios_software_category_home.html
Trust: 0.3
url:www.cisco.com
Trust: 0.3
sources:
            
            
            CNVD: CNVD-2014-04856 // 
            
            
            
            VULHUB: VHN-71267 // 
            
            
            
            BID: 69066 // 
            
            
            
            JVNDB: JVNDB-2014-003733 // 
            
            
            
            CNNVD: CNNVD-201408-098 // 
            
            
            
            NVD: CVE-2014-3327

CREDITS
Cisco
Trust: 0.9
sources:
            
            
            BID: 69066 // 
            
            
            
            CNNVD: CNNVD-201408-098

SOURCES
db:CNVDid:CNVD-2014-04856
db:VULHUBid:VHN-71267
db:BIDid:69066
db:JVNDBid:JVNDB-2014-003733
db:CNNVDid:CNNVD-201408-098
db:NVDid:CVE-2014-3327

LAST UPDATE DATE
2024-11-23T23:02:44.508000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2014-04856date:2014-08-08T00:00:00
db:VULHUBid:VHN-71267date:2017-08-29T00:00:00
db:BIDid:69066date:2014-08-06T00:00:00
db:JVNDBid:JVNDB-2014-003733date:2014-08-13T00:00:00
db:CNNVDid:CNNVD-201408-098date:2014-08-12T00:00:00
db:NVDid:CVE-2014-3327date:2024-11-21T02:07:52.463

SOURCES RELEASE DATE
db:CNVDid:CNVD-2014-04856date:2014-08-08T00:00:00
db:VULHUBid:VHN-71267date:2014-08-11T00:00:00
db:BIDid:69066date:2014-08-06T00:00:00
db:JVNDBid:JVNDB-2014-003733date:2014-08-13T00:00:00
db:CNNVDid:CNNVD-201408-098date:2014-08-08T00:00:00
db:NVDid:CVE-2014-3327date:2014-08-11T22:55:04.617