CVE-2014-2146

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-22 · updated 2026-06-17
Weakness: CWE-20

Description

The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which allows remote attackers to bypass intended resource-access restrictions via spoofed traffic that matches one of these sessions, aka Bug IDs CSCun94946 and CSCun96847.

Affected products

Cisco IOS: through 15.4\(1\)t1
Cisco IOS XE: through 15.4\(3\)s

References

http://www.securityfocus.com/bid/93126
https://tools.cisco.com/security/center/viewAlert.x?alertId=39129
http://www.securityfocus.com/bid/93126
https://tools.cisco.com/security/center/viewAlert.x?alertId=39129

Get alerted when CVE-2014-2146 or the next vulnerability affects your stack