CVE-2014-3295 - Vulnerability Details

Vendors	Products
Cisco	Nx-os

Link	Providers
http://secunia.com/advisories/59158
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295
http://tools.cisco.com/security/center/viewAlert.x?alertId=34585
http://www.securityfocus.com/bid/67983
http://www.securitytracker.com/id/1030409

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-06-10T00:00:00", "descriptions": [{"lang": "en", "value": "The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2014-06-18T18:57:01", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco"}, "references": [{"name": "67983", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/67983"}, {"name": "20140610 Cisco NX-OS Software HSRP Authentication Denial of Service Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=34585"}, {"name": "1030409", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1030409"}, {"name": "59158", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/59158"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@cisco.com", "ID": "CVE-2014-3295", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "67983", "refsource": "BID", "url": "http://www.securityfocus.com/bid/67983"}, {"name": "20140610 Cisco NX-OS Software HSRP Authentication Denial of Service Vulnerability", "refsource": "CISCO", "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295"}, {"name": "http://tools.cisco.com/security/center/viewAlert.x?alertId=34585", "refsource": "CONFIRM", "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=34585"}, {"name": "1030409", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1030409"}, {"name": "59158", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/59158"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T10:35:57.208Z"}, "title": "CVE Program Container", "references": [{"name": "67983", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/67983"}, {"name": "20140610 Cisco NX-OS Software HSRP Authentication Denial of Service Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=34585"}, {"name": "1030409", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1030409"}, {"name": "59158", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/59158"}]}]}, "cveMetadata": {"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2014-3295", "datePublished": "2014-06-14T01:00:00", "dateReserved": "2014-05-07T00:00:00", "dateUpdated": "2024-08-06T10:35:57.208Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2014-06-10T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2014-06-18T18:57:01 (string)

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

}

references : [ »

0 : { »

name : 67983 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/67983 (string)

}

1 : { »

name : 20140610 Cisco NX-OS Software HSRP Authentication Denial of Service Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_CISCO (string)

]

url : http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295 (string)

}

2 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : http://tools.cisco.com/security/center/viewAlert.x?alertId=34585 (string)

}

3 : { »

name : 1030409 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

]

url : http://www.securitytracker.com/id/1030409 (string)

}

4 : { »

name : 59158 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

]

url : http://secunia.com/advisories/59158 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@cisco.com (string)

ID : CVE-2014-3295 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 67983 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/67983 (string)

}

1 : { »

name : 20140610 Cisco NX-OS Software HSRP Authentication Denial of Service Vulnerability (string)

refsource : CISCO (string)

url : http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295 (string)

}

2 : { »

name : http://tools.cisco.com/security/center/viewAlert.x?alertId=34585 (string)

refsource : CONFIRM (string)

url : http://tools.cisco.com/security/center/viewAlert.x?alertId=34585 (string)

}

3 : { »

name : 1030409 (string)

refsource : SECTRACK (string)

url : http://www.securitytracker.com/id/1030409 (string)

}

4 : { »

name : 59158 (string)

refsource : SECUNIA (string)

url : http://secunia.com/advisories/59158 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-06T10:35:57.208Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 67983 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/67983 (string)

}

1 : { »

name : 20140610 Cisco NX-OS Software HSRP Authentication Denial of Service Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_CISCO (string)

2 : x_transferred (string)

]

url : http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295 (string)

}

2 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : http://tools.cisco.com/security/center/viewAlert.x?alertId=34585 (string)

}

3 : { »

name : 1030409 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

2 : x_transferred (string)

]

url : http://www.securitytracker.com/id/1030409 (string)

}

4 : { »

name : 59158 (string)

tags : [ »

0 : third-party-advisory (string)

1 : x_refsource_SECUNIA (string)

2 : x_transferred (string)

]

url : http://secunia.com/advisories/59158 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

assignerShortName : cisco (string)

cveId : CVE-2014-3295 (string)

datePublished : 2014-06-14T01:00:00 (string)

dateReserved : 2014-05-07T00:00:00 (string)

dateUpdated : 2024-08-06T10:35:57.208Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*", "matchCriteriaId": "A38B96C0-B39F-4896-8246-5347CC72C0F2", "versionEndIncluding": "6.2\\(2a\\)", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.1.\\(2\\):*:*:*:*:*:*:*", "matchCriteriaId": "DA1702F4-816E-4045-80B6-2BC71DC344F6", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.1.\\(3\\):*:*:*:*:*:*:*", "matchCriteriaId": "C1AC8BC8-638A-4F73-A64B-B490675AA1A4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.1.\\(4\\):*:*:*:*:*:*:*", "matchCriteriaId": "7F128DC9-C4CA-4547-B6C8-8E83A8C5F6C8", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.1.\\(5\\):*:*:*:*:*:*:*", "matchCriteriaId": "99FB6C32-CD16-41E9-AB42-A294424266DB", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.2\\(3\\):*:*:*:*:*:*:*", "matchCriteriaId": "7EE1586F-E01C-4C4F-8284-1B1FE5370343", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.2\\(4\\):*:*:*:*:*:*:*", "matchCriteriaId": "891D883E-8263-42B2-A978-49F6AEF4CD49", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.2\\(6\\):*:*:*:*:*:*:*", "matchCriteriaId": "9C059CCD-1BE1-4675-8388-0DB219C04E45", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.2\\(8\\):*:*:*:*:*:*:*", "matchCriteriaId": "67829CF9-FDCB-4A17-9241-1B48A38B1A74", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.2.\\(2a\\):*:*:*:*:*:*:*", "matchCriteriaId": "C0476865-D306-47B7-A84A-C163A316D9DE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.0\\(2a\\):*:*:*:*:*:*:*", "matchCriteriaId": "C6753978-267E-4398-A1F7-96C37B5C8600", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.0\\(3\\):*:*:*:*:*:*:*", "matchCriteriaId": "16131960-37FE-4154-A82C-E3249B066DC4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.0\\(5\\):*:*:*:*:*:*:*", "matchCriteriaId": "7B3296D4-DA94-4E41-BAAF-CEC0E84BB498", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.1\\(1a\\):*:*:*:*:*:*:*", "matchCriteriaId": "93FF6E77-B7C2-4CBB-A8FE-1D6218BA330C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.1\\(3\\):*:*:*:*:*:*:*", "matchCriteriaId": "5CAF2ADA-2C84-44EB-8893-0AB612AFF68F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.1\\(4\\):*:*:*:*:*:*:*", "matchCriteriaId": "B6D70623-8F98-44CA-A589-B93B167F88EA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.1\\(5\\):*:*:*:*:*:*:*", "matchCriteriaId": "10AE58DE-C708-4C15-B2C4-2366F4378344", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.1\\(6\\):*:*:*:*:*:*:*", "matchCriteriaId": "80510B23-1F02-4FE0-BF3D-E2CD2A5D5B2F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.2\\(1\\):*:*:*:*:*:*:*", "matchCriteriaId": "5F179FBC-22BE-4C44-AAE0-866F1D6B1270", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.2\\(3a\\):*:*:*:*:*:*:*", "matchCriteriaId": "0C628947-4A0E-4904-A6F7-745C3370A8F4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.2\\(4\\):*:*:*:*:*:*:*", "matchCriteriaId": "356B4143-5184-491B-9D10-19D6536366CD", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.2\\(5\\):*:*:*:*:*:*:*", "matchCriteriaId": "C038896F-6DBC-4695-9DBE-A60F6C39AFFC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.2\\(7\\):*:*:*:*:*:*:*", "matchCriteriaId": "9F2453F2-704F-48F7-8009-991BE0B49251", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.2\\(9\\):*:*:*:*:*:*:*", "matchCriteriaId": "E00B4AC8-1D27-4394-AF28-10785AEFC073", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.0\\(1\\):*:*:*:*:*:*:*", "matchCriteriaId": "48926DA6-2020-4D4F-AD12-555163C6C352", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.0\\(2\\):*:*:*:*:*:*:*", "matchCriteriaId": "161C5BDB-CD50-40C7-B972-A1B650607338", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.0\\(3\\):*:*:*:*:*:*:*", "matchCriteriaId": "7A0E6C0C-B88D-4085-AA28-0EA8CD1AB419", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.0\\(4\\):*:*:*:*:*:*:*", "matchCriteriaId": "A967FB72-BCEB-4A76-A322-DDB0C4094E7C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.1\\(1\\):*:*:*:*:*:*:*", "matchCriteriaId": "C6F882AB-C25D-477F-96BF-7001BB77B955", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.1\\(2\\):*:*:*:*:*:*:*", "matchCriteriaId": "35E48EE6-C498-4E13-AC5E-28F6B4391725", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.1\\(3\\):*:*:*:*:*:*:*", "matchCriteriaId": "A3B41075-01D1-4832-A025-07A378F2A5E6", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.1\\(4\\):*:*:*:*:*:*:*", "matchCriteriaId": "858E4134-643C-422C-8441-5372F4BC25D8", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.1\\(4a\\):*:*:*:*:*:*:*", "matchCriteriaId": "A12BFDB0-4B90-4EB6-9CBE-A7A33C57EA9E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.2\\(2\\):*:*:*:*:*:*:*", "matchCriteriaId": "2FDE8EF9-47CF-451D-9570-3D369D74D44F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309."}, {"lang": "es", "value": "La implementaci\u00f3n HSRP en Cisco NX-OS 6.2(2a) y anteriores permite a atacantes remotos evadir autenticaci\u00f3n y causar una denegaci\u00f3n de servicio (modificaci\u00f3n del estado de pertenencia a un grupo y redirecci\u00f3n de trafico hacia un 'agujero negro' -blackhole-) a trav\u00e9s de paquetes HSRP malformados, tambi\u00e9n conocido como Bug ID CSCup11309."}], "id": "CVE-2014-3295", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.8, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:A/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 6.5, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-06-14T04:26:47.173", "references": [{"source": "psirt@cisco.com", "tags": ["Permissions Required"], "url": "http://secunia.com/advisories/59158"}, {"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295"}, {"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=34585"}, {"source": "psirt@cisco.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/67983"}, {"source": "psirt@cisco.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030409"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required"], "url": "http://secunia.com/advisories/59158"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=34585"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/67983"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1030409"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A38B96C0-B39F-4896-8246-5347CC72C0F2 (string)

versionEndIncluding : 6.2\(2a\) (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.1.\(2\):*:*:*:*:*:*:* (string)

matchCriteriaId : DA1702F4-816E-4045-80B6-2BC71DC344F6 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.1.\(3\):*:*:*:*:*:*:* (string)

matchCriteriaId : C1AC8BC8-638A-4F73-A64B-B490675AA1A4 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.1.\(4\):*:*:*:*:*:*:* (string)

matchCriteriaId : 7F128DC9-C4CA-4547-B6C8-8E83A8C5F6C8 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.1.\(5\):*:*:*:*:*:*:* (string)

matchCriteriaId : 99FB6C32-CD16-41E9-AB42-A294424266DB (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.2\(3\):*:*:*:*:*:*:* (string)

matchCriteriaId : 7EE1586F-E01C-4C4F-8284-1B1FE5370343 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.2\(4\):*:*:*:*:*:*:* (string)

matchCriteriaId : 891D883E-8263-42B2-A978-49F6AEF4CD49 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.2\(6\):*:*:*:*:*:*:* (string)

matchCriteriaId : 9C059CCD-1BE1-4675-8388-0DB219C04E45 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.2\(8\):*:*:*:*:*:*:* (string)

matchCriteriaId : 67829CF9-FDCB-4A17-9241-1B48A38B1A74 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.2.\(2a\):*:*:*:*:*:*:* (string)

matchCriteriaId : C0476865-D306-47B7-A84A-C163A316D9DE (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.0\(2a\):*:*:*:*:*:*:* (string)

matchCriteriaId : C6753978-267E-4398-A1F7-96C37B5C8600 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.0\(3\):*:*:*:*:*:*:* (string)

matchCriteriaId : 16131960-37FE-4154-A82C-E3249B066DC4 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.0\(5\):*:*:*:*:*:*:* (string)

matchCriteriaId : 7B3296D4-DA94-4E41-BAAF-CEC0E84BB498 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.1\(1a\):*:*:*:*:*:*:* (string)

matchCriteriaId : 93FF6E77-B7C2-4CBB-A8FE-1D6218BA330C (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.1\(3\):*:*:*:*:*:*:* (string)

matchCriteriaId : 5CAF2ADA-2C84-44EB-8893-0AB612AFF68F (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.1\(4\):*:*:*:*:*:*:* (string)

matchCriteriaId : B6D70623-8F98-44CA-A589-B93B167F88EA (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.1\(5\):*:*:*:*:*:*:* (string)

matchCriteriaId : 10AE58DE-C708-4C15-B2C4-2366F4378344 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.1\(6\):*:*:*:*:*:*:* (string)

matchCriteriaId : 80510B23-1F02-4FE0-BF3D-E2CD2A5D5B2F (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.2\(1\):*:*:*:*:*:*:* (string)

matchCriteriaId : 5F179FBC-22BE-4C44-AAE0-866F1D6B1270 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.2\(3a\):*:*:*:*:*:*:* (string)

matchCriteriaId : 0C628947-4A0E-4904-A6F7-745C3370A8F4 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.2\(4\):*:*:*:*:*:*:* (string)

matchCriteriaId : 356B4143-5184-491B-9D10-19D6536366CD (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.2\(5\):*:*:*:*:*:*:* (string)

matchCriteriaId : C038896F-6DBC-4695-9DBE-A60F6C39AFFC (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.2\(7\):*:*:*:*:*:*:* (string)

matchCriteriaId : 9F2453F2-704F-48F7-8009-991BE0B49251 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.2\(9\):*:*:*:*:*:*:* (string)

matchCriteriaId : E00B4AC8-1D27-4394-AF28-10785AEFC073 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.0\(1\):*:*:*:*:*:*:* (string)

matchCriteriaId : 48926DA6-2020-4D4F-AD12-555163C6C352 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.0\(2\):*:*:*:*:*:*:* (string)

matchCriteriaId : 161C5BDB-CD50-40C7-B972-A1B650607338 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.0\(3\):*:*:*:*:*:*:* (string)

matchCriteriaId : 7A0E6C0C-B88D-4085-AA28-0EA8CD1AB419 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.0\(4\):*:*:*:*:*:*:* (string)

matchCriteriaId : A967FB72-BCEB-4A76-A322-DDB0C4094E7C (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.1\(1\):*:*:*:*:*:*:* (string)

matchCriteriaId : C6F882AB-C25D-477F-96BF-7001BB77B955 (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.1\(2\):*:*:*:*:*:*:* (string)

matchCriteriaId : 35E48EE6-C498-4E13-AC5E-28F6B4391725 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.1\(3\):*:*:*:*:*:*:* (string)

matchCriteriaId : A3B41075-01D1-4832-A025-07A378F2A5E6 (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.1\(4\):*:*:*:*:*:*:* (string)

matchCriteriaId : 858E4134-643C-422C-8441-5372F4BC25D8 (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.1\(4a\):*:*:*:*:*:*:* (string)

matchCriteriaId : A12BFDB0-4B90-4EB6-9CBE-A7A33C57EA9E (string)

vulnerable : true (boolean)

}

33 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.2\(2\):*:*:*:*:*:*:* (string)

matchCriteriaId : 2FDE8EF9-47CF-451D-9570-3D369D74D44F (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309. (string)

}

1 : { »

lang : es (string)

value : La implementación HSRP en Cisco NX-OS 6.2(2a) y anteriores permite a atacantes remotos evadir autenticación y causar una denegación de servicio (modificación del estado de pertenencia a un grupo y redirección de trafico hacia un 'agujero negro' -blackhole-) a través de paquetes HSRP malformados, también conocido como Bug ID CSCup11309. (string)

}

]

id : CVE-2014-3295 (string)

lastModified : 2025-04-12T10:46:40.837 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : ADJACENT_NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 4.8 (number)

confidentialityImpact : NONE (string)

integrityImpact : PARTIAL (string)

vectorString : AV:A/AC:L/Au:N/C:N/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 6.5 (number)

impactScore : 4.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

}

published : 2014-06-14T04:26:47.173 (string)

references : [ »

0 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Permissions Required (string)

]

url : http://secunia.com/advisories/59158 (string)

}

1 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295 (string)

}

2 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://tools.cisco.com/security/center/viewAlert.x?alertId=34585 (string)

}

3 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/67983 (string)

}

4 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securitytracker.com/id/1030409 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Permissions Required (string)

]

url : http://secunia.com/advisories/59158 (string)

}

6 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295 (string)

}

7 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://tools.cisco.com/security/center/viewAlert.x?alertId=34585 (string)

}

8 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/67983 (string)

}

9 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Third Party Advisory (string)

1 : VDB Entry (string)

]

url : http://www.securitytracker.com/id/1030409 (string)

}

]

sourceIdentifier : psirt@cisco.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-287 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Access Vector Adjacent Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Access Vector Adjacent Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object