Cisco IOS and IOS XE Software CVE-2014-3309 Security Bypass Vulnerability

Bugtraq ID:	68463
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-3309
Remote:	Yes
Local:	No
Published:	Jul 08 2014 12:00AM
Updated:	Jul 08 2014 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS XE Software 0 Cisco IOS 0
Not Vulnerable:

Cisco IOS and IOS XE Software CVE-2014-3309 Security Bypass Vulnerability

Cisco IOS and IOS XE Software are prone to a remote security-bypass vulnerability.

An attacker can exploit this issue to bypass the security restrictions, access information and cause denial-of-service condition.

This issue is being tracked by Cisco Bug ID CSCuj66318.

Cisco IOS and IOS XE Software CVE-2014-3309 Security Bypass Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco IOS and IOS XE Software CVE-2014-3309 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS and IOS XE Software CVE-2014-3309 Security Bypass Vulnerability

References:

• Cisco IOS Software (Cisco Systems)
  
• Cisco IOS and IOS XE Software NTP Access Group Vulnerability (Cisco)