4.3

CVE-2014-3262

The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.3(3)S and earlier and IOS XE does not properly validate parameters in ITR control messages, which allows remote attackers to cause a denial of service (CEF outage and packet drops) via malformed messages, aka Bug ID CSCun73782.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Version <= 15.3\(3\)s
Cisco ≫ Ios Version 15.3m
Cisco ≫ Ios Version 15.3s
Cisco ≫ Ios Xe Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.55% 0.718
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3262
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34233
Vendor Advisory
http://www.securitytracker.com/id/1030243
Third Party Advisory
VDB Entry