7.8
CVSSv2

CVE-2014-2106

Published: 27/03/2014 Updated: 28/03/2014
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

Cisco IOS 15.3M prior to 15.3(3)M2 and IOS XE 3.10.xS prior to 3.10.2S allow remote malicious users to cause a denial of service (device reload) via crafted SIP messages, aka Bug ID CSCug45898.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios xe 3.10.0s

cisco ios 15.3\\(3\\)m1

cisco ios xe 3.10.1s1

cisco ios 15.3\\(3\\)m

Vendor Advisories

A vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device To exploit this vulnerability, affected devices must be configured to process SIP messages Limited Cisco IOS Software and Cisco IOS XE Softw ...