CVE Feed

    Dashboard / CVE / CVE-2014-7997

    CVE-2014-7997

    The DHCP implementation in Cisco IOS on Aironet access points does not properly handle error conditions with short leases and unsuccessful lease-renewal attempts, which allows remote attackers to cause a denial of service (device restart) by triggering a transition into a recovery state that was intended to involve a network-interface restart but actually involves a full device restart, aka Bug ID CSCtn16281.

    Published:Nov 15, 2014
    Last Modified:Apr 12, 2025
    EPS:Nov 15, 2014
    EPSS Score:0.00246
    CVSS Score:6.1

    Affected Products

    Vendor
    Cisco
    Product
    Aironet 1040
    Vendor
    Cisco
    Product
    Aironet 1140
    Vendor
    Cisco
    Product
    Aironet 1260
    Vendor
    Cisco
    Product
    Aironet 3500
    Vendor
    Cisco
    Product
    Aironet 3600
    Vendor
    Cisco
    Product
    Aironet 3600e
    Vendor
    Cisco
    Product
    Aironet 3600i
    Vendor
    Cisco
    Product
    Aironet 3600p
    Vendor
    Cisco
    Product
    Aironet 600 Office Extend
    Vendor
    Cisco
    Product
    Aironet Ap1100
    Vendor
    Cisco
    Product
    Aironet Ap1130ag
    Vendor
    Cisco
    Product
    Aironet Ap1131
    Vendor
    Cisco
    Product
    Aironet Ap1200
    Vendor
    Cisco
    Product
    Aironet Ap1230ag
    Vendor
    Cisco
    Product
    Aironet Ap1240
    Vendor
    Cisco
    Product
    Aironet Ap1240ag
    Vendor
    Cisco
    Product
    Aironet Ap1300
    Vendor
    Cisco
    Product
    Aironet Ap1400
    Vendor
    Cisco
    Product
    Aironet Ap340
    Vendor
    Cisco
    Product
    Aironet Ap350
    Vendor
    Cisco
    Product
    Ios

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High