CVE-2014-2131 - The packet driver in Cisco IOS allows remote attackers to cause a denial of service (device reload)

CVE-2014-2131

Summary

The packet driver in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a series of (1) Virtual Switching Systems (VSS) or (2) Bidirectional Forwarding Detection (BFD) packets, aka Bug IDs CSCug41049 and CSCue61890.

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2131

Vulnerable Configurations

cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*

CVSS

Base:	6.1 (as of 31-03-2014 - 16:07)
Impact:
Exploitability:

CWE

CWE-399

CAPEC

Access

Vector	Complexity	Authentication
ADJACENT_NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	COMPLETE

cvss-vector via4

AV:A/AC:L/Au:N/C:N/I:N/A:C

refmap via4

cisco

20140328 Cisco IOS Software High Priority Queue Denial of Service Vulnerability

Last major update

31-03-2014 - 16:07

Published

29-03-2014 - 01:55

Last modified

31-03-2014 - 16:07