CVE-2014-3348: Input Validation
Published Sep 10, 2014
·Updated
The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.
Affected Software
8 affected components
Cisco Integrated Management Controller<=2.2.2
Cisco Unified Computing System E140d
Cisco Unified Computing System E140dp
Cisco Unified Computing System E140s M1
Cisco Unified Computing System E140s M2
Cisco Unified Computing System E160d
Cisco Unified Computing System E160dp
Cisco Unified Computing System En120s M2
Event History
Sep 10, 2014
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-3348?
CVE-2014-3348 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2014-3348?
To fix CVE-2014-3348, upgrade the Cisco Integrated Management Controller to version 2.3.1 or later.
3
What types of systems are affected by CVE-2014-3348?
CVE-2014-3348 affects Cisco Unified Computing System E-Series blade servers running versions prior to 2.3.1.
4
Can CVE-2014-3348 cause a denial of service?
Yes, CVE-2014-3348 allows remote attackers to cause a denial of service by sending crafted SSH packets.
5
What is the impact of CVE-2014-3348 on the Integrated Management Controller?
The impact of CVE-2014-3348 is an IMC hang, leading to interruptions in management functionality.