CVE-2014-3404

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-10 · updated 2026-06-17
Weakness: CWE-310

Description

The Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid message via crafted messages, aka Bug ID CSCuq22677.

Affected products

Cisco IOS XE: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3404
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3404

Get alerted when CVE-2014-3404 or the next vulnerability affects your stack