5.4

CVE-2014-3347

EPSS 0.46%
Veröffentlicht 28.08.2014 23:55:05
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@cisco.com
Teams Watchlist Login
Unerledigt Login

Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid state of the hardware encryption module, aka Bug ID CSCul77897.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ 1801 Integrated Service Router Version-

Cisco ≫ 1802 Integrated Service Router Version-

Cisco ≫ 1803 Integrated Service Router Version-

Cisco ≫ 1811 Integrated Service Router Version-

Cisco ≫ 1812 Integrated Service Router Version-

Cisco ≫ 1841 Integrated Service Router Version-

Cisco ≫ 1861 Integrated Service Router Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.46%	0.611

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.4	4.9	6.9	AV:N/AC:H/Au:N/C:N/I:N/A:C

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3347

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=35453

Vendor Advisory

http://www.securityfocus.com/bid/69439

http://www.securitytracker.com/id/1030772

https://exchange.xforce.ibmcloud.com/vulnerabilities/95558

https://nvd.nist.gov/vuln/detail/CVE-2014-3347

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-3347

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-3347

EUVD