Vulnerability Details CVE-2014-3347
Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid state of the hardware encryption module, aka Bug ID CSCul77897.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.0%
CVSS Severity
CVSS v2 Score 5.4
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3347
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35453
- http://www.securityfocus.com/bid/69439
- http://www.securitytracker.com/id/1030772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95558
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3347
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35453
- http://www.securityfocus.com/bid/69439
- http://www.securitytracker.com/id/1030772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95558
Products affected by CVE-2014-3347
-
cpe:2.3:h:cisco:1801_integrated_service_router:-
-
cpe:2.3:h:cisco:1802_integrated_service_router:-
-
cpe:2.3:h:cisco:1803_integrated_service_router:-
-
cpe:2.3:h:cisco:1811_integrated_service_router:-
-
cpe:2.3:h:cisco:1812_integrated_service_router:-
-
cpe:2.3:h:cisco:1841_integrated_service_router:-
-
cpe:2.3:h:cisco:1861_integrated_service_router:-
-
cpe:2.3:o:cisco:ios:15.1(4)m2