CVE-2014-3330
Cisco NX-OS 6.1(2)I2(1) - Unauthenticated Packet-Drop Policy Bypass via Logged Packet Flood
Title source: llmDescription
Cisco NX-OS 6.1(2)I2(1) on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030676
Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=35181
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3330
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/95122
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/69057
Scores
EPSS
0.0211
EPSS Percentile
79.9%
Details
CWE
CWE-264
Status
published
Products (2)
cisco/nexus_9000
cisco/nx-os
6.1\(2\)i2\(1\)
Published
Aug 11, 2014
Tracked Since
Feb 18, 2026