CVE-2014-3276

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-05-26 · updated 2026-06-17
Weakness: CWE-399

Description

Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices, which allows remote authenticated users to cause a denial of service (RADIUS outage) by sourcing these packets from two origins, aka Bug ID CSCuo56780.

Affected products

Cisco Identity Services Engine unknown: through 1.2; 1.0, 1.1

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3276
http://tools.cisco.com/security/center/viewAlert.x?alertId=34329
http://www.securitytracker.com/id/1030274
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3276
http://tools.cisco.com/security/center/viewAlert.x?alertId=34329
http://www.securitytracker.com/id/1030274

Get alerted when CVE-2014-3276 or the next vulnerability affects your stack