CVE-2014-3295

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309.

Metrics

CVSS 2.0 4.8/10AV:A/AC:L/Au:N/C:N/I:P/A:P

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/59158Permissions Required
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34585Vendor Advisory
http://www.securityfocus.com/bid/67983Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1030409Third Party Advisory, VDB Entry
http://secunia.com/advisories/59158Permissions Required
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34585Vendor Advisory
http://www.securityfocus.com/bid/67983Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1030409Third Party Advisory, VDB Entry

Timeline

Published: Jun 14, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-32964.0The XML programmatic interface (XML PI) in Cisco WebEx Meeting Server 1.5(.1.131) and earlier allows remote authenticated users to obtain se CVE-2014-32974.0Cisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict the content of MyServices action URLs, which allows CVE-2014-32984.0Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenti CVE-2014-32996.8Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via malformed IPsec packets, aka Bug ID CSCui79745.CVE-2014-33007.5The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 d CVE-2014-33015.0The ProfileAction controller in Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) and earlier allows remote attackers to obtain sensitive infor CVE-2014-33025.8user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, wh CVE-2014-33034.0The web framework in Cisco WebEx Meetings Server does not properly restrict the content of query strings, which allows remote attackers to o CVE-2014-33045.0The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering crafted URLs and exami CVE-2014-33056.8Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote at CVE-2014-330610.0The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway pro CVE-2014-33076.8The DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products allows remote attackers to execute arbitrary co