CVE-2014-2143: Medium severity cisco IOS vulnerability
Published Apr 4, 2014
·Updated
The IKE implementation in Cisco IOS 15.4(1)T and earlier and IOS XE allows remote attackers to cause a denial of service (security-association drop) via crafted Main Mode packets, aka Bug ID CSCun31021.
Affected Software
14 affected components
cisco IOS<=15.4\(1\)t
cisco IOS=15.0
cisco IOS=15.0\(1\)se
cisco IOS=15.1
cisco IOS=15.2
cisco IOS=15.3
cisco IOS=15.3\(2\)s
cisco IOS=15.3\(3\)m
cisco IOS=15.3\(3\)m1
cisco IOS=15.3\(3\)m2
cisco IOS=15.3\(3\)s
cisco IOS=15.3s
cisco IOS=15.4
Cisco IOS XE
Event History
Apr 4, 2014
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:10 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2014-2143?
CVE-2014-2143 is rated as a medium severity vulnerability that can cause denial of service.
2
How do I fix CVE-2014-2143?
The fix for CVE-2014-2143 involves upgrading to a fixed version of Cisco IOS or IOS XE that addresses this vulnerability.
3
Which versions of Cisco IOS are affected by CVE-2014-2143?
CVE-2014-2143 affects Cisco IOS versions up to 15.4(1)T and several earlier versions including 15.0, 15.1, 15.2, and 15.3.
4
Can CVE-2014-2143 be exploited remotely?
Yes, CVE-2014-2143 can be exploited remotely by attackers through crafted Main Mode packets.
5
What impact does CVE-2014-2143 have on network devices?
CVE-2014-2143 can lead to security association drops, severely disrupting connectivity for affected devices.