← Back

CVE-2014-3290

nvd nist
Published: Jun 14, 2014Modified: May 6, 2026

JSON object

Loading...
4.8
Vector
AV:A/AC:L/Au:N/C:P/I:P/A:N
Exploitability: 6.5 / Impact: 4.9
Source: NVD

Description

The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867.

Affected (1)

Products: Cisco: Ios Xe
Cisco
1 product
Ios Xe
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ios Xe
Version 3.12s

Related CWEs

CWE-264
CWE-264

References (10)

Source: psirt@cisco.com
Third Party Advisory
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Third Party AdvisoryVDB Entry
Source: psirt@cisco.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.