CVE-2014-2124

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Cisco IOS 15.1(2)SY3 and earlier, when used with Supervisor Engine 2T (aka Sup2T) on Catalyst 6500 devices, allows remote attackers to cause a denial of service (device crash) via crafted multicast packets, aka Bug ID CSCuf60783.

Metrics

CVSS 2.0 7.1/10AV:N/AC:M/Au:N/C:N/I:N/A:C

Weakness enumeration

CWE-399

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/57515Permissions Required
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2124Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=33413Vendor Advisory
http://www.securityfocus.com/bid/66301Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029942Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/91904
http://secunia.com/advisories/57515Permissions Required
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2124Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=33413Vendor Advisory
http://www.securityfocus.com/bid/66301Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1029942Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/91904

Timeline

Published: Mar 21, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-21254.3Cross-site scripting (XSS) vulnerability in the Web Inbox in Cisco Unity Connection 8.6(2a)SU3 and earlier allows remote attackers to inject CVE-2014-21268.5Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47), 8.4 before 8.4(7.5), 8.7 before 8.7(1.11), 9.0 before 9.0(3.10), and CVE-2014-21278.5Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4 before 8.4(7.9), 8.6 before 8.6(1.13), 9.0 CVE-2014-21285.0The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47, 8.3 before 8.3(2.40), 8.4 before 8.4(7.3 CVE-2014-21297.1The SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48), 8.4 before 8.4(6.5), 9.0 before 9.0(3.1)CVE-2014-21306.5Cisco Secure Access Control Server (ACS) provides an unintentional administration web interface based on Apache Tomcat, which allows remote CVE-2014-21316.1The packet driver in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a series of (1) Virtual Switching Sy CVE-2014-21327.8Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 bef CVE-2014-21339.3Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remo CVE-2014-21349.3Heap-based buffer overflow in Cisco WebEx Recording Format (WRF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 all CVE-2014-21359.3Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remo CVE-2014-21369.3Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remo