CVE-2014-3409

Cisco IOS < 12.2(33)SRE9a and IOS XE < 3.13S - Denial of Service via Malformed CFM Packets

Title source: llm

Description

The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device reload) via malformed CFM packets, aka Bug ID CSCuq93406.

References (6)

Core 6

Core References

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/61799

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1031119

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/70715

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3409

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/97758

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=36184

Scores

EPSS 0.0101

EPSS Percentile 59.4%

Details

CWE

CWE-399

Status published

Products (2)

cisco/ios < 12.2\(33\)sre9a

cisco/ios_xe < 3.13s

Published Oct 25, 2014

Tracked Since Feb 18, 2026