Vulnerability in Cisco iOS Xe
CVE-2014-3405
Cisco IOS XE enables the IPv6 Routing Protocol for Low-Power and Lossy Networks (aka RPL) on both the Autonomic Control Plane (ACP) and external Autonomic Networking Infrastructure (ANI) interfaces, which allows remote attackers to conduct route-injection attacks via crafted RPL advertisements on an ANI interface, aka Bug ID CSCuq22673.
EPSS: 0.007 (50.1th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ios_xe
- N/a — versions n/a
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)