Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-3347

Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid state of the hardware encryption module, aka Bug ID CSCul77897.

Published

2014-08-28T23:55:05.513

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.4 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: HIGH
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

4.9

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-399
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios 15.1\(4\)m2 Yes
Hardware cisco 1801_integrated_service_router - Yes
Hardware cisco 1802_integrated_service_router - Yes
Hardware cisco 1803_integrated_service_router - Yes
Hardware cisco 1811_integrated_service_router - Yes
Hardware cisco 1812_integrated_service_router - Yes
Hardware cisco 1841_integrated_service_router - Yes
Hardware cisco 1861_integrated_service_router - Yes
References