CVE-2014-3348

Cisco Integrated Management Controller < 2.3.1 - Denial of Service via Crafted SSH Packet

Title source: llm

Description

The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.

References (6)

Core 6

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/69652

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1030813

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=35588

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140908-ucse

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3348

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/95782

Scores

EPSS 0.0258

EPSS Percentile 83.4%

Details

CWE

CWE-20

Status published

Products (8)

cisco/integrated_management_controller < 2.2.2

cisco/unified_computing_system_e140d

cisco/unified_computing_system_e140dp

cisco/unified_computing_system_e140s_m1

cisco/unified_computing_system_e140s_m2

cisco/unified_computing_system_e160d

cisco/unified_computing_system_e160dp

cisco/unified_computing_system_en120s_m2

Published Sep 10, 2014

Tracked Since Feb 18, 2026