VULNERABILITY INTELLIGENCE
CVE-2014-3403
CVSS score5 MEDIUM
EPSS probability0.65%
CISA KEVNot currently listed
Published2014-10-10
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
The Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647.
Primary references
- psirt@cisco.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory