CVEvulnerability

CVE-2014-3295

4.8 MEDIUM Published 2014-06-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-06-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.8 MEDIUM — AV:A/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
CWE-287

Description

The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309.

Affected configurations

• cisco nx-os (<= 6.2\(2a\)) • cisco nx-os 4.1.\(2\) • cisco nx-os 4.1.\(3\) • cisco nx-os 4.1.\(4\) • cisco nx-os 4.1.\(5\) • cisco nx-os 4.2\(3\) • cisco nx-os 4.2\(4\) • cisco nx-os 4.2\(6\) • cisco nx-os 4.2\(8\) • cisco nx-os 4.2.\(2a\) • cisco nx-os 5.0\(2a\) • cisco nx-os 5.0\(3\) • cisco nx-os 5.0\(5\) • cisco nx-os 5.1\(1a\) • cisco nx-os 5.1\(3\) • cisco nx-os 5.1\(4\) • cisco nx-os 5.1\(5\) • cisco nx-os 5.1\(6\) • cisco nx-os 5.2\(1\) • cisco nx-os 5.2\(3a\) • cisco nx-os 5.2\(4\) • cisco nx-os 5.2\(5\) • cisco nx-os 5.2\(7\) • cisco nx-os 5.2\(9\) • cisco nx-os 6.0\(1\) • cisco nx-os 6.0\(2\) • cisco nx-os 6.0\(3\) • cisco nx-os 6.0\(4\) • cisco nx-os 6.1\(1\) • cisco nx-os 6.1\(2\) • cisco nx-os 6.1\(3\) • cisco nx-os 6.1\(4\) • cisco nx-os 6.1\(4a\) • cisco nx-os 6.2\(2\)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References