VULNERABILITY INTELLIGENCE
CVE-2014-3355
CVSS score7.8 HIGH
EPSS probability2.78%
CISA KEVNot currently listed
Published2014-09-25
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Description
The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCug75942.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer