Improper input validation in Cisco iOS

CVE-2014-2113

Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service (I/O memory consumption and device reload) via a malformed IPv6 packet, aka Bug ID CSCui59540.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.020 (78.5th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 15.1, 15.2, 15.3
  • Cisco Ios_xe — versions 3.3.0s, 3.3.0sg, 3.3.1s
  • N/a — versions n/a

Weakness classification (CWE)

References