CVE-2014-2108

High

Published: 27/03/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

Cisco IOS versions 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S are vulnerable to an attack that can cause a device reload via a malformed IKEv2 packet.

Risk Assessment

Attackers can remotely trigger a device reload, leading to service downtime and potential financial losses for the organization.

Recommendation

It is recommended to update the software to the latest version to mitigate this vulnerability and secure devices against attacks.

Other vulnerabilities in Cisco IOS, IOS XE

CVE-2016-6393High
The AAA service in Cisco IOS versions 12.0 through 12.4 and 15.0 through 15.6 and IOS XE versions 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via a failed SSH connection attempt that is mishandled during generation of an error-log message.

Original NVD description (English source)

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service (device reload) via a malformed IKEv2 packet, aka Bug ID CSCui88426.