VDB
CVE-2014-3360
CVE-2014-3360
PUBLISHED
CVSS 7.800000190734863 HIGH
Cisco IOS 12.4 and 15.0 through 15.4 and IOS XE 3.1.xS, 3.2.xS, 3.3.xS, 3.4.xS, 3.5.xS, 3.6.xS, and 3.7.xS before 3.7.6S; 3.8.xS, 3.9.xS, and 3.10.xS before 3.10.1S; and 3.11.xS before 3.12S allow remote attackers to cause a denial of service (device reload) via a crafted SIP message, aka Bug ID CSCul46586.
EPSS 1.09% · 78.3th percentile
Risk Scores
CVSS 2.0
7.800000190734863
EPSS Score
1.09%
78.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | ios | 15.1, 15.2, 15.4 |
| n/a | n/a | n/a |
| cisco | ios_xe | 3.2.1s, 3.2.2s, 3.3.0s |
Exploit Intelligence
Timeline
- Sep 24, 2014 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 16, 2023 EPSS Score
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-sip/cvrf/cisco-sa-20140924-sip_cvrf.xml url
- ciscoiosxe-cve20143360-dos(96174) vdb
- 1030897 vdb
- 20140924 Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability vendor-advisory
- 70141 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2014-3360 advisory