CVE-2014-3295
First published: Sat Jun 14 2014(Updated: )
The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco NX-OS | <=6.2\(2a\) | |
| Cisco NX-OS | =4.1.\(2\) | |
| Cisco NX-OS | =4.1.\(3\) | |
| Cisco NX-OS | =4.1.\(4\) | |
| Cisco NX-OS | =4.1.\(5\) | |
| Cisco NX-OS | =4.2\(3\) | |
| Cisco NX-OS | =4.2\(4\) | |
| Cisco NX-OS | =4.2\(6\) | |
| Cisco NX-OS | =4.2\(8\) | |
| Cisco NX-OS | =4.2.\(2a\) | |
| Cisco NX-OS | =5.0\(2a\) | |
| Cisco NX-OS | =5.0\(3\) | |
| Cisco NX-OS | =5.0\(5\) | |
| Cisco NX-OS | =5.1\(1a\) | |
| Cisco NX-OS | =5.1\(3\) | |
| Cisco NX-OS | =5.1\(4\) | |
| Cisco NX-OS | =5.1\(5\) | |
| Cisco NX-OS | =5.1\(6\) | |
| Cisco NX-OS | =5.2\(1\) | |
| Cisco NX-OS | =5.2\(3a\) | |
| Cisco NX-OS | =5.2\(4\) | |
| Cisco NX-OS | =5.2\(5\) | |
| Cisco NX-OS | =5.2\(7\) | |
| Cisco NX-OS | =5.2\(9\) | |
| Cisco NX-OS | =6.0\(1\) | |
| Cisco NX-OS | =6.0\(2\) | |
| Cisco NX-OS | =6.0\(3\) | |
| Cisco NX-OS | =6.0\(4\) | |
| Cisco NX-OS | =6.1\(1\) | |
| Cisco NX-OS | =6.1\(2\) | |
| Cisco NX-OS | =6.1\(3\) | |
| Cisco NX-OS | =6.1\(4\) | |
| Cisco NX-OS | =6.1\(4a\) | |
| Cisco NX-OS | =6.2\(2\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-3295?
CVE-2014-3295 has a significant severity rating due to its potential to allow unauthorized access and denial of service on affected Cisco NX-OS devices.
How do I fix CVE-2014-3295?
To fix CVE-2014-3295, upgrade to a patched version of Cisco NX-OS that addresses the vulnerability.
Who is affected by CVE-2014-3295?
CVE-2014-3295 affects multiple versions of Cisco NX-OS, including versions up to and including 6.2(2a).
What types of attacks can exploit CVE-2014-3295?
CVE-2014-3295 can be exploited through malformed HSRP packets, leading to authentication bypass and denial of service.
Is there a workaround for CVE-2014-3295?
There is no effective workaround for CVE-2014-3295, and upgrading to a secure version is strongly recommended.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/references
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco nx-os
- version/cisco nx-os/6.2\(2a\)
- version/cisco nx-os/4.1.\(2\)
- version/cisco nx-os/4.1.\(3\)
- version/cisco nx-os/4.1.\(4\)
- version/cisco nx-os/4.1.\(5\)
- version/cisco nx-os/4.2\(3\)
- version/cisco nx-os/4.2\(4\)
- version/cisco nx-os/4.2\(6\)
- version/cisco nx-os/4.2\(8\)
- version/cisco nx-os/4.2.\(2a\)
- version/cisco nx-os/5.0\(2a\)
- version/cisco nx-os/5.0\(3\)
- version/cisco nx-os/5.0\(5\)
- version/cisco nx-os/5.1\(1a\)
- version/cisco nx-os/5.1\(3\)
- version/cisco nx-os/5.1\(4\)
- version/cisco nx-os/5.1\(5\)
- version/cisco nx-os/5.1\(6\)
- version/cisco nx-os/5.2\(1\)
- version/cisco nx-os/5.2\(3a\)
- version/cisco nx-os/5.2\(4\)
- version/cisco nx-os/5.2\(5\)
- version/cisco nx-os/5.2\(7\)
- version/cisco nx-os/5.2\(9\)
- version/cisco nx-os/6.0\(1\)
- version/cisco nx-os/6.0\(2\)
- version/cisco nx-os/6.0\(3\)
- version/cisco nx-os/6.0\(4\)
- version/cisco nx-os/6.1\(1\)
- version/cisco nx-os/6.1\(2\)
- version/cisco nx-os/6.1\(3\)
- version/cisco nx-os/6.1\(4\)
- version/cisco nx-os/6.1\(4a\)
- version/cisco nx-os/6.2\(2\)