CVE-2014-3354

High

Published: 25/09/2014(UTC)Translated: 17/06/2026(UTC)NVD NIST

Summary

Cisco IOS versions 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, 15.3 and IOS XE 2.x and 3.x before 3.7.4S are vulnerable to an attack that can lead to a denial of service (device reload) via malformed RSVP packets.

Risk Assessment

Attackers can remotely cause device failure, leading to service availability interruptions within the organization.

Recommendation

It is recommended to update the software to the latest version to mitigate this vulnerability and secure devices against potential attacks.

Other vulnerabilities in Cisco IOS i IOS XE

CVE-2016-6380High
Cisco IOS versions 12.0 through 12.4 and 15.0 through 15.6, as well as IOS XE versions 3.1 through 3.15, have a vulnerability in the DNS forwarder that allows remote attackers to obtain sensitive information from process memory or cause a denial of service via a crafted DNS response.

Original NVD description (English source)

Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG and 3.4.xSG before 3.4.4SG; and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allow remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCui11547.