CVE Feed

    Dashboard / CVE / CVE-2014-3347

    CVE-2014-3347

    Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid state of the hardware encryption module, aka Bug ID CSCul77897.

    Published:Aug 28, 2014
    Last Modified:Apr 12, 2025
    EPS:Aug 28, 2014
    EPSS Score:0.00458
    CVSS Score:5.4

    Affected Products

    Vendor
    Cisco
    Product
    1801 Integrated Service Router
    Vendor
    Cisco
    Product
    1802 Integrated Service Router
    Vendor
    Cisco
    Product
    1803 Integrated Service Router
    Vendor
    Cisco
    Product
    1811 Integrated Service Router
    Vendor
    Cisco
    Product
    1812 Integrated Service Router
    Vendor
    Cisco
    Product
    1841 Integrated Service Router
    Vendor
    Cisco
    Product
    1861 Integrated Service Router
    Vendor
    Cisco
    Product
    Ios

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2018-0154 (CVSS 7.5) — A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco I…
    CVE-2018-0179 (CVSS 5.9) — Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an …
    CVE-2018-0180 (CVSS 5.9) — Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an …
    CVE-2017-12319 (CVSS 5.9) — A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco…
    CVE-2017-12240 (CVSS 9.8) — The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability tha…
    CVE-2017-12233 (CVSS 7.5) — Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12…
    CVE-2017-12237 (CVSS 7.5) — A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco…
    CVE-2017-12232 (CVSS 6.5) — A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2)…
    CVE-2017-12234 (CVSS 7.5) — Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12…
    CVE-2017-12231 (CVSS 7.5) — A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 thr…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High