Cisco IOS Software IPsec Packet Handling Denial of Service Vulnerability

Bugtraq ID:	68177
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-3299
Remote:	Yes
Local:	No
Published:	Jun 24 2014 12:00AM
Updated:	May 23 2017 04:25PM
Credit:	Cisco
Vulnerable:	Rockwell Automation Stratix 5900 0 Cisco IOS 15.4T Cisco IOS 15.4(2)T Cisco IOS 15.4(1)T3 Cisco IOS 15.4(1)T2 Cisco IOS 15.4(1)T1 Cisco IOS 15.4(1)T
Not Vulnerable:	Rockwell Automation Stratix 5900 15.6.3

Cisco IOS Software IPsec Packet Handling Denial of Service Vulnerability

Cisco IOS Software is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to cause the affected device to reload, denying service to legitimate users.

This issue is being tracked by Cisco Bug ID CSCui79745.

Cisco IOS Software IPsec Packet Handling Denial of Service Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco IOS Software IPsec Packet Handling Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS Software IPsec Packet Handling Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco IOS Software IPsec Denial of Service Vulnerability (Cisco)
  
• Advisory (ICSA-17-094-04)Rockwell Automation Stratix 5900 (CERT)
  
• Cisco Security Notice : Cisco IOS Software IPsec Denial of Service Vulnerability (Cisco)