CVEvulnerability
CVE-2014-3276
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-05-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:N/A:P
- Weaknesses
- CWE-399
Description
Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices, which allows remote authenticated users to cause a denial of service (RADIUS outage) by sourcing these packets from two origins, aka Bug ID CSCuo56780.
Affected configurations
• cisco identity services engine software (<= 1.2)
• cisco identity services engine software 1.0
• cisco identity services engine software 1.1
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3276 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34329 Vendor Advisory
- http://www.securitytracker.com/id/1030274 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3276 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34329 Vendor Advisory
- http://www.securitytracker.com/id/1030274 Third Party Advisory, VDB Entry