Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.4
CVSSv2

CVE-2014-3347

Published: 28/08/2014 Updated: 29/08/2017
CVSS v2 Base Score: 5.4 | Impact Score: 6.9 | Exploitability Score: 4.9
VMScore: 481
Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C
Subscribe to Ios

Vulnerability Summary

Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote malicious users to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid state of the hardware encryption module, aka Bug ID CSCul77897.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios 15.1\\(4\\)m2

cisco 1802_integrated_service_router -

cisco 1803_integrated_service_router -

cisco 1801_integrated_service_router -

cisco 1811_integrated_service_router -

cisco 1812_integrated_service_router -

cisco 1841_integrated_service_router -

cisco 1861_integrated_service_router -

Vendor Advisories

Cisco: Cisco 1800 Series ISR ISDN Basic Rate Interface Denial of Service Vulnerability
Cisco 1800 Series Integrated Services Routers (ISR) contain a vulnerability in the hardware entropy collection module when the Integrated Services Digital Network (ISDN) Basic Rate Interface (BRI) is configured and connected to a public switched network This could allow an attacker with knowledge of the ISDN phone number of the affected device to ...

References

CWE-399http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3347http://tools.cisco.com/security/center/viewAlert.x?alertId=35453http://www.securitytracker.com/id/1030772http://www.securityfocus.com/bid/69439https://exchange.xforce.ibmcloud.com/vulnerabilities/95558https://nvd.nist.govhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140828-CVE-2014-3347
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463CVE-2024-3400deserializationCVE-2024-21788CVE-2023-42433CVE-2024-21841CVE-2024-22095local file inclusionmemory leak
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook