Cisco IOS CVE-2014-2108 Denial of Service Vulnerability

Bugtraq ID:	66471
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-2108
Remote:	Yes
Local:	No
Published:	Mar 26 2014 12:00AM
Updated:	May 23 2017 04:24PM
Credit:	Cisco
Vulnerable:	Rockwell Automation Stratix 5900 0 Cisco IOS XE 3.9S.1 Cisco IOS XE 3.9S.0 Cisco IOS XE 3.9.xS Cisco IOS XE 3.8S(.2) Cisco IOS XE 3.8S(.1) Cisco IOS XE 3.8S(.0) Cisco IOS XE 3.8.xS Cisco IOS XE 3.7S(.1) Cisco IOS XE 3.7S(.0) Cisco IOS XE 3.6S(.2) Cisco IOS XE 3.6S(.1) Cisco IOS XE 3.6S(.0) Cisco IOS XE 3.6.xS Cisco IOS XE 3.5S(.1) Cisco IOS XE 3.5S(.0) Cisco IOS XE 3.5 Cisco IOS XE 3.4S(.6) Cisco IOS XE 3.4S(.5) Cisco IOS XE 3.4S(.4) Cisco IOS XE 3.4S(.3) Cisco IOS XE 3.4S(.2) Cisco IOS XE 3.4S(.1) Cisco IOS XE 3.4S(.0) Cisco IOS XE 3.4.xS Cisco IOS XE 3.3S(.2) Cisco IOS XE 3.3S(.1) Cisco IOS XE 3.3S(.0) Cisco IOS XE 3.3.xS Cisco IOS XE 3.2S(.2) Cisco IOS XE 3.2S(.1) Cisco IOS XE 3.2S(.0) Cisco IOS XE 3.2.xS Cisco IOS XE 3.10S.0 Cisco IOS 3.4.xS Cisco IOS 3.3.xSG Cisco IOS 15.3T Cisco IOS 15.3S Cisco IOS 15.3M Cisco IOS 15.2T Cisco IOS 15.2SNI Cisco IOS 15.2EX Cisco IOS 15.2E Cisco IOS 15.1XO Cisco IOS 15.1T Cisco IOS 15.1SY Cisco IOS 15.1SNI Cisco IOS 15.1SNH Cisco IOS 15.1SNG Cisco IOS 15.1SG Cisco IOS 15.1S Cisco IOS 15.1MR Cisco IOS 15.0SE Cisco IOS 15.0EZ Cisco Ios 15.0EY Cisco IOS 15.0EH Cisco IOS 15.0ED
Not Vulnerable:	Rockwell Automation Stratix 5900 15.6.3

Cisco IOS CVE-2014-2108 Denial of Service Vulnerability

Cisco IOS is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected device to reload, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCui88426.

Cisco IOS CVE-2014-2108 Denial of Service Vulnerability

To exploit this issue, attackers can use readily available utilities.

Cisco IOS CVE-2014-2108 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS CVE-2014-2108 Denial of Service Vulnerability

References:

• Cisco IOS Software (Cisco Systems)
  
• Vulnerability Alert: Cisco IOS Software and Cisco IOS XE Software IKEv2 Denial o (Cisco)
  
• Advisory (ICSA-17-094-04)Rockwell Automation Stratix 5900 (CERT)
  
• Cisco IOS Software Internet Key Exchange Version 2 Denial of Service Vulnerabili (Cisco)