CVE-2014-2146

medium
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which allows remote attackers to bypass intended resource-access restrictions via spoofed traffic that matches one of these sessions, aka Bug IDs CSCun94946 and CSCun96847.

References

http://www.securityfocus.com/bid/93126

https://tools.cisco.com/security/center/viewAlert.x?alertId=39129

Details

Source: MITRE

Published: 2016-09-22

Updated: 2017-02-19

Type: CWE-20

Risk Information

CVSS v2

Base Score: 4.3

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Impact Score: 2.9

Exploitability Score: 8.6

Severity: MEDIUM

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Impact Score: 3.6

Exploitability Score: 2.8

Severity: MEDIUM

Vulnerable Software

Configuration 1

OR

cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:* versions up to 15.4\(1\)t1 (inclusive)

cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:* versions up to 15.4\(3\)s (inclusive)

Tenable Plugins

View all (2 total)

IDNameProductFamilySeverity
91855Cisco IOS-XE Zone-Based Firewall Feature Security Bypass (CSCun96847)NessusCISCO
medium
91854Cisco IOS Zone-Based Firewall Feature Security Bypass (CSCun94946)NessusCISCO
medium