CVE-2014-3403

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-10 · updated 2026-06-17
Weakness: CWE-310

Description

The Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647.

Affected products

Cisco IOS XE: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3403
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3403

Get alerted when CVE-2014-3403 or the next vulnerability affects your stack