CVE-2014-3347

Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid state of the hardware encryption module, aka Bug ID CSCul77897.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.4 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:N/I:N/A:C
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
VendorProductVersion
ciscoios
15.1\(4\)m2
cisco1801_integrated_service_router
-
cisco1802_integrated_service_router
-
cisco1803_integrated_service_router
-
cisco1811_integrated_service_router
-
cisco1812_integrated_service_router
-
cisco1841_integrated_service_router
-
cisco1861_integrated_service_router
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3347
http://tools.cisco.com/security/center/viewAlert.x?alertId=35453
http://www.securityfocus.com/bid/69439
http://www.securitytracker.com/id/1030772
https://exchange.xforce.ibmcloud.com/vulnerabilities/95558
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3347
http://tools.cisco.com/security/center/viewAlert.x?alertId=35453
http://www.securityfocus.com/bid/69439
http://www.securitytracker.com/id/1030772
https://exchange.xforce.ibmcloud.com/vulnerabilities/95558