Cisco Identity Services Engine RADIUS Packet Processing Denial of Service Vulnerability

Bugtraq ID:	67556
Class:	Design Error
CVE:	CVE-2014-3276
Remote:	Yes
Local:	No
Published:	May 21 2014 12:00AM
Updated:	May 21 2014 12:00AM
Credit:	Cisco
Vulnerable:
Not Vulnerable:

Cisco Identity Services Engine RADIUS Packet Processing Denial of Service Vulnerability

Cisco Identity Services Engine (ISE) is prone to a remote denial-of-service vulnerability.

An attacker can exploit this issue to cause the RADIUS process to hang, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCuo56780.

Cisco Identity Services Engine RADIUS Packet Processing Denial of Service Vulnerability

Attackers can exploit this issue using readily available tools.

Cisco Identity Services Engine RADIUS Packet Processing Denial of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Cisco Identity Services Engine RADIUS Packet Processing Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )