CVE-2014-3347
Cisco IOS 15.1(4)M2 - Denial of Service via ISDN Interrupt Timer Collision
Title source: llmDescription
Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid state of the hardware encryption module, aka Bug ID CSCul77897.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1030772
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/69439
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/95558
Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=35453
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3347
Scores
EPSS
0.0098
EPSS Percentile
58.4%
Details
CWE
CWE-399
Status
published
Products (8)
cisco/1801_integrated_service_router
cisco/1802_integrated_service_router
cisco/1803_integrated_service_router
cisco/1811_integrated_service_router
cisco/1812_integrated_service_router
cisco/1841_integrated_service_router
cisco/1861_integrated_service_router
cisco/ios
15.1\(4\)m2
Published
Aug 28, 2014
Tracked Since
Feb 18, 2026