CVE-2014-3361

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-09-25 · updated 2026-06-17
Weakness: CWE-119

Description

The ALG module in Cisco IOS 15.0 through 15.4 does not properly implement SIP over NAT, which allows remote attackers to cause a denial of service (device reload) via multipart SDP IPv4 traffic, aka Bug ID CSCun54071.

Affected products

Cisco IOS: 15.0, 15.1, 15.2, 15.3, 15.4

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-nat
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-nat/cvrf/cisco-sa-20140924-nat_cvrf.xml
http://www.securityfocus.com/bid/70129
http://www.securitytracker.com/id/1030896
https://exchange.xforce.ibmcloud.com/vulnerabilities/96181
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-nat
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140924-nat/cvrf/cisco-sa-20140924-nat_cvrf.xml
http://www.securityfocus.com/bid/70129
http://www.securitytracker.com/id/1030896
https://exchange.xforce.ibmcloud.com/vulnerabilities/96181

Get alerted when CVE-2014-3361 or the next vulnerability affects your stack