CVE-2014-3347

Severity Score

5.4

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid state of the hardware encryption module, aka Bug ID CSCul77897.

Cisco IOS 15.1(4)M2 en los dispositivos Cisco 1800 ISR, cuando la interfaz ISDN Basic Rate está habilitada, permite a atacantes remotos causar una denegación de servicio (cuelgue del dispositivo) mediante el aprovechamiento del conocimiento del número de teléfono ISDN para provocar una colisión de interrumpir el temporizador durante la colección de entropía, que lleva a un estado inválido del módulo de la codificación de hardware, también conocido como Bug ID CSCul77897.

*Credits: N/A

CVSS Scores

NISTv2 5.4

Attack Vector

Network

Attack Complexity

High

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2014-05-07 CVE Reserved
2014-08-28 CVE Published
2023-03-07 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-399: Resource Management Errors

CAPEC

References (5)

URL	Tag	Source
http://www.securityfocus.com/bid/69439	Vdb Entry
http://www.securitytracker.com/id/1030772	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/95558	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3347	2017-08-29
http://tools.cisco.com/security/center/viewAlert.x?alertId=35453	2017-08-29

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"	Ios Search vendor "Cisco" for product "Ios"	15.1\(4\)m2 Search vendor "Cisco" for product "Ios" and version "15.1\(4\)m2"	-	Affected	in	Cisco Search vendor "Cisco"	1801 Integrated Service Router Search vendor "Cisco" for product "1801 Integrated Service Router"	-	-	Affected
Cisco Search vendor "Cisco"	Ios Search vendor "Cisco" for product "Ios"	15.1\(4\)m2 Search vendor "Cisco" for product "Ios" and version "15.1\(4\)m2"	-	Affected	in	Cisco Search vendor "Cisco"	1802 Integrated Service Router Search vendor "Cisco" for product "1802 Integrated Service Router"	-	-	Affected
Cisco Search vendor "Cisco"	Ios Search vendor "Cisco" for product "Ios"	15.1\(4\)m2 Search vendor "Cisco" for product "Ios" and version "15.1\(4\)m2"	-	Affected	in	Cisco Search vendor "Cisco"	1803 Integrated Service Router Search vendor "Cisco" for product "1803 Integrated Service Router"	-	-	Affected
Cisco Search vendor "Cisco"	Ios Search vendor "Cisco" for product "Ios"	15.1\(4\)m2 Search vendor "Cisco" for product "Ios" and version "15.1\(4\)m2"	-	Affected	in	Cisco Search vendor "Cisco"	1811 Integrated Service Router Search vendor "Cisco" for product "1811 Integrated Service Router"	-	-	Affected
Cisco Search vendor "Cisco"	Ios Search vendor "Cisco" for product "Ios"	15.1\(4\)m2 Search vendor "Cisco" for product "Ios" and version "15.1\(4\)m2"	-	Affected	in	Cisco Search vendor "Cisco"	1812 Integrated Service Router Search vendor "Cisco" for product "1812 Integrated Service Router"	-	-	Affected
Cisco Search vendor "Cisco"	Ios Search vendor "Cisco" for product "Ios"	15.1\(4\)m2 Search vendor "Cisco" for product "Ios" and version "15.1\(4\)m2"	-	Affected	in	Cisco Search vendor "Cisco"	1841 Integrated Service Router Search vendor "Cisco" for product "1841 Integrated Service Router"	-	-	Affected
Cisco Search vendor "Cisco"	Ios Search vendor "Cisco" for product "Ios"	15.1\(4\)m2 Search vendor "Cisco" for product "Ios" and version "15.1\(4\)m2"	-	Affected	in	Cisco Search vendor "Cisco"	1861 Integrated Service Router Search vendor "Cisco" for product "1861 Integrated Service Router"	-	-	Affected