Vulnerability Name:

CVE-2014-3321 (CCN-94487)

Assigned:2014-07-15
Published:2014-07-15
Updated:2017-01-12
Summary:Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial of service (chip and card hangs) via a series of crafted MPLS packets, aka Bug ID CSCuo91149.
CVSS v3 Severity:6.5 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Exploitability Metrics:Attack Vector (AV): Adjacent
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:5.7 Medium (CVSS v2 Vector: AV:A/AC:M/Au:N/C:N/I:N/A:C)
4.2 Medium (Temporal CVSS v2 Vector: AV:A/AC:M/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Adjacent_Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
5.7 Medium (CCN CVSS v2 Vector: AV:A/AC:M/Au:N/C:N/I:N/A:C)
4.2 Medium (CCN Temporal CVSS v2 Vector: AV:A/AC:M/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Adjacent_Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-20
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2014-3321

Source: CCN
Type: Cisco Security Notice
Cisco IOS XR Software MPLS Packet Denial of Service Vulnerability

Source: CISCO
Type: Vendor Advisory
20140715 Cisco IOS XR Software MPLS Packet Denial of Service Vulnerability

Source: CONFIRM
Type: Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34936

Source: CCN
Type: BID-68536
Cisco IOS XR Software MPLS Packet Handling Denial of Service Vulnerability

Source: SECTRACK
Type: Third Party Advisory, VDB Entry
1030597

Source: XF
Type: UNKNOWN
ciscoiosxr-cve20143321-dos(94487)

Vulnerable Configuration:Configuration 1:
  • cpe:/o:cisco:ios_xr:4.3.0:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:ios_xr:4.3.1:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:ios_xr:4.3.2:*:*:*:*:*:*:*
  • OR cpe:/o:cisco:ios_xr:*:*:*:*:*:*:*:* (Version <= 4.3.4)
  • AND
  • cpe:/h:cisco:asr_9000_rsp440_router:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:asr_9001:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:asr_9006:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:asr_9010:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:asr_9904:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:asr_9912:-:*:*:*:*:*:*:*
  • OR cpe:/h:cisco:asr_9922:-:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/o:cisco:ios_xr:*:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    cisco ios xr 4.3.0
    cisco ios xr 4.3.1
    cisco ios xr 4.3.2
    cisco ios xr *
    cisco asr 9000 rsp440 router -
    cisco asr 9001 -
    cisco asr 9006 -
    cisco asr 9010 -
    cisco asr 9904 -
    cisco asr 9912 -
    cisco asr 9922 -
    cisco ios xr *