CVE-2014-0669

Cisco ASR 5000 Series Software - Payment Restriction Bypass via WSP Packets

Title source: llm

Description

The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371.

References (7)

Core 7

Core References

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=32513

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/90614

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0669

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/102318

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/65052

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/56546

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1029666

Scores

EPSS 0.0183

EPSS Percentile 76.6%

Details

CWE

CWE-264

Status published

Products (1)

cisco/asr_5000_series_software

Published Jan 22, 2014

Tracked Since Feb 18, 2026