CVE-2014-3347
Medium
Description
Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid state of the hardware encryption module, aka Bug ID CSCul77897.
SeverityMedium
CVSS5.4
Exploit probability62. percentile1%
Product
Cisco Ios
PublishedAug 28, 2014
First seenAug 28, 2014
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | 15.1\(4\)m2 | — |
| cisco 1801_integrated_service_router | No range specified | — |
| cisco 1802_integrated_service_router | No range specified | — |
| cisco 1803_integrated_service_router | No range specified | — |
| cisco 1811_integrated_service_router | No range specified | — |
| cisco 1812_integrated_service_router | No range specified | — |
| cisco 1841_integrated_service_router | No range specified | — |
| cisco 1861_integrated_service_router | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.