CVE-2014-3261

Severity: high (CVSS 7.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-05-26 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on Nexus 3000 devices, NX-OS 4.1 before 4.1(2)E1(1l) on Nexus 4000 devices, NX-OS 5.x before 5.1(3)N1(1) on Nexus 5000 devices, NX-OS 5.2 before 5.2(3a) on Nexus 7000 devices, and CG-OS CG4 before CG4(2) on Connected 1000 Connected Grid Routers allows remote SMTP servers to execute arbitrary code via a crafted reply, aka Bug IDs CSCtk00695, CSCts56633, CSCts56632, CSCts56628, CSCug14405, and CSCuf61322.

Affected products

Cisco Cg-Os: cg4, cg4(1)
Cisco Cgr 1120: all versions
Cisco Cgr 1240: all versions
Cisco Nexus 3016Q: all versions
Cisco Nexus 3048: all versions
Cisco Nexus 3064T: all versions
Cisco Nexus 3064X: all versions
Cisco Nexus 3548: all versions
Cisco Nexus 4001I: all versions
Cisco Nexus 5000: all versions
Cisco Nexus 5010: all versions
Cisco Nexus 5010P Switch: all versions
Cisco Nexus 5020: all versions
Cisco Nexus 5020P Switch: all versions
Cisco Nexus 5548P: all versions
Cisco Nexus 5548Up: all versions
Cisco Nexus 5596Up: all versions
Cisco Nexus 7000: all versions
Cisco Nexus 7000 10-Slot: all versions
Cisco Nexus 7000 18-Slot: all versions
Cisco Nexus 7000 9-Slot: all versions
Cisco NX-OS: 5.2, 5.2(1), 5.2(3), 5.0, 5.0(2), 5.0(2)n1(1) (+41)
Cisco Unified Computing System 6120Xp Fabric Interconnect: all versions
Cisco Unified Computing System 6140Xp Fabric Interconnect: all versions
Cisco Unified Computing System 6248Up Fabric Interconnect: all versions
Cisco Unified Computing System 6296Up Fabric Interconnect: all versions
Cisco Unified Computing System Infrastructure And Unified Computing System Software: 1.4(1j)

References

Get alerted when CVE-2014-3261 or the next vulnerability affects your stack