Improper input validation in Cisco iOS

CVE-2014-2108

Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service (device reload) via a malformed IKEv2 packet, aka Bug ID CSCui88426.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.022 (80.7th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 12.2, 15.0, 15.0\(1\)se
  • Cisco Ios_xe — versions 3.2.0s, 3.2.0sg, 3.2.0xo
  • N/a — versions n/a

Weakness classification (CWE)

References