CVE-2014-3361

High

Published: 25/09/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The ALG module in Cisco IOS versions 15.0 through 15.4 does not properly implement SIP over NAT, allowing remote attackers to cause a denial of service (device reload) via multipart SDP IPv4 traffic.

Risk Assessment

Attackers can exploit this vulnerability to remotely reload the device, leading to service availability interruptions.

Recommendation

It is recommended to upgrade to the latest version of Cisco IOS to mitigate this vulnerability.

Other vulnerabilities in Cisco IOS ALG module

CVE-2014-2111High
The Application Layer Gateway (ALG) module in Cisco IOS versions 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service (device reload) via crafted DNS packets.

Original NVD description (English source)

The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service (device reload) via multipart SDP IPv4 traffic, aka Bug ID CSCun54071.