Vulnerability in Cisco 1801 Integrated Service Router
CVE-2014-3347
Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid state of the hardware encryption module, aka Bug ID CSCul77897.
EPSS: 0.010 (58.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco 1801_integrated_service_router
- Cisco 1802_integrated_service_router
- Cisco 1803_integrated_service_router
- Cisco 1811_integrated_service_router
- Cisco 1812_integrated_service_router
- Cisco 1841_integrated_service_router
- Cisco 1861_integrated_service_router
- Cisco Ios — versions 15.1\(4\)m2
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_BID)