CVE-2014-3327

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-11 · updated 2026-06-17
Weakness: CWE-20

Description

The EnergyWise module in Cisco IOS 12.2, 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.2.xXO, 3.3.xSG, 3.4.xSG, and 3.5.xE before 3.5.3E allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 packet, aka Bug ID CSCup52101.

Affected products

Cisco IOS: 12.2, 15.0, 15.1, 15.2, 15.4
Cisco IOS XE: 3.2.00.xo.15.0(2)xo, 3.2.0xo, 3.3.0sg, 3.3.1sg, 3.4.0sg, 3.4.1sg (+6)

References

http://secunia.com/advisories/60650
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140806-energywise
http://www.securityfocus.com/bid/69066
http://www.securitytracker.com/id/1030682
https://exchange.xforce.ibmcloud.com/vulnerabilities/95137
http://secunia.com/advisories/60650
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140806-energywise
http://www.securityfocus.com/bid/69066
http://www.securitytracker.com/id/1030682
https://exchange.xforce.ibmcloud.com/vulnerabilities/95137

Get alerted when CVE-2014-3327 or the next vulnerability affects your stack