VULNERABILITY INTELLIGENCE

CVE-2014-3409

CVSS score6.1 MEDIUM
EPSS probability1.01%
CISA KEVNot currently listed
Published2014-10-25
Last modified2026-06-17
CVSS vectorAV:A/AC:L/Au:N/C:N/I:N/A:C

Description

The Ethernet Connectivity Fault Management (CFM) handling feature in Cisco IOS 12.2(33)SRE9a and earlier and IOS XE 3.13S and earlier allows remote attackers to cause a denial of service (device reload) via malformed CFM packets, aka Bug ID CSCuq93406.

Primary references