CVE-2014-2108

Cisco IOS 12.2 and 15.0-15.3 and IOS XE 3.2-3.7 and 3.8-3.10 - Denial of Service via Malformed IKEv2 Packet

Title source: llm

Description

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service (device reload) via a malformed IKEv2 packet, aka Bug ID CSCui88426.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140326-ikev2

Scores

EPSS 0.0221

EPSS Percentile 80.5%

Details

CWE

CWE-20

Status published

Products (50)

cisco/ios 12.2

cisco/ios 15.0

cisco/ios 15.0\(1\)se

cisco/ios 15.1

cisco/ios 15.2

cisco/ios 15.3

cisco/ios_xe 3.2.0s

cisco/ios_xe 3.2.0sg

cisco/ios_xe 3.2.0xo

cisco/ios_xe 3.2.1s

... and 40 more

Published Mar 27, 2014

Tracked Since Feb 18, 2026