Cisco IOS Network Address Translation Multiple Denial of Service Vulnerabilities

Bugtraq ID:	66470
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-2111 CVE-2014-2109
Remote:	Yes
Local:	No
Published:	Mar 26 2014 12:00AM
Updated:	May 23 2017 04:25PM
Credit:	Cisco
Vulnerable:	Rockwell Automation Stratix 5900 0 Cisco IOS 15.4S Cisco IOS 15.3S Cisco IOS 15.2SNH Cisco IOS 15.2S Cisco IOS 15.2M Cisco IOS 15.2E Cisco IOS 15.1T Cisco IOS 15.1SNH Cisco IOS 15.1SNG Cisco IOS 15.1SG Cisco IOS 15.1GC Cisco IOS 15.1EY Cisco IOS 15.0MR Cisco IOS 15.0M Cisco IOS 12.4XZ Cisco IOS 12.4XY Cisco IOS 12.4XW Cisco IOS 12.4XV Cisco IOS 12.4XT Cisco IOS 12.4XR Cisco IOS 12.4XQ Cisco IOS 12.4XP Cisco IOS 12.4XN Cisco IOS 12.4XM Cisco IOS 12.4XL Cisco IOS 12.4XK Cisco IOS 12.4XJ Cisco IOS 12.4XG Cisco IOS 12.4XF Cisco IOS 12.4XE Cisco IOS 12.4XD Cisco IOS 12.4XC Cisco IOS 12.4XB Cisco IOS 12.4XA Cisco IOS 12.3YZ Cisco IOS 12.3YX Cisco IOS 12.3YU Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YR Cisco IOS 12.3YN Cisco IOS 12.3YM Cisco IOS 12.3YK Cisco IOS 12.3YJ Cisco IOS 12.3YI Cisco IOS 12.3YG Cisco IOS 12.3YF Cisco IOS 12.3YD Cisco IOS 12.3XX Cisco IOS 12.3XW Cisco IOS 12.3XU Cisco IOS 12.3XR Cisco IOS 12.3XQ Cisco IOS 12.3XN Cisco IOS 12.3XM Cisco IOS 12.3XL Cisco IOS 12.3XK Cisco IOS 12.3XJ Cisco IOS 12.3XI Cisco IOS 12.2ZYA Cisco IOS 12.2XNF Cisco IOS 12.2XNE Cisco IOS 12.2XND Cisco IOS 12.2XNC Cisco IOS 12.2XNB Cisco IOS 12.2XNA Cisco IOS 12.2SRE Cisco IOS 12.2SRD Cisco IOS 12.2SRC Cisco IOS 12.2SRB Cisco IOS 12.2SRA Cisco IOS 12.2SG Cisco IOS 12.2SEG Cisco IOS 12.2SCF Cisco IOS 12.2SCE Cisco IOS 12.2SCD Cisco IOS 12.2SCC Cisco IOS 12.2SCB Cisco IOS 12.2SCA Cisco IOS 12.2SB Cisco IOS 12.2IXH Cisco IOS 12.2IXG Cisco IOS 12.2IRI Cisco IOS 12.2IRH Cisco IOS 12.2IRF Cisco IOS 12.2IRE Cisco IOS 12.2IRD Cisco IOS 12.2IRC Cisco IOS 12.2IRB Cisco IOS 12.2EZ Cisco IOS 12.2EY Cisco IOS 12.2EX
Not Vulnerable:	Rockwell Automation Stratix 5900 15.6.3

Cisco IOS Network Address Translation Multiple Denial of Service Vulnerabilities

Cisco IOS is prone to multiple remote denial-of-service vulnerabilities.

Successful exploits may allow an attackers to cause a reload of the affected devices, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCue00996, CSCuh33843 and CSCuj41494.

Cisco IOS Network Address Translation Multiple Denial of Service Vulnerabilities

To exploit these issues, attackers can use readily available utilities.

Cisco IOS Network Address Translation Multiple Denial of Service Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS Network Address Translation Multiple Denial of Service Vulnerabilities

References:

• Cisco IOS Software (Cisco Systems)
  
• Cisco IOS Software TCP Input Vulnerability (Cisco)
  
• Vulnerability Alert: Cisco IOS Software NAT DNS Vulnerability (Cisco)
  
• Advisory (ICSA-17-094-04)Rockwell Automation Stratix 5900 (CERT)
  
• Cisco IOS Software Network Address Translation Vulnerabilities (Cisco)