CVE-2014-3356
HighSummary
The metadata flow feature in Cisco IOS versions 15.1 through 15.3 and IOS XE before version 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, as well as 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S, allows remote attackers to cause a denial of service (device reload) via malformed RSVP packets.
Risk Assessment
Attackers can exploit this vulnerability to remotely reload the device, leading to a disruption in network service availability.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and to monitor network traffic for potential attacks.
Other vulnerabilities in Cisco IOS 15.1 - 15.3, IOS XE 3.3.xXO, 3.6.xS, 3.7.xS, 3.8.xS, 3.9.xS, 3.10.xS
Original NVD description (English source)
The metadata flow feature in Cisco IOS 15.1 through 15.3 and IOS XE 3.3.xXO before 3.3.1XO, 3.6.xS and 3.7.xS before 3.7.6S, and 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S allows remote attackers to cause a denial of service (device reload) via malformed RSVP packets, aka Bug ID CSCue22753.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS