medium4.8
CVE-2014-3290
The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networkin…
Impact
The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ios Xe | Version 3.12s |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/58715
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3290
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34613
- http://www.securityfocus.com/bid/68021
- http://www.securitytracker.com/id/1030444
- http://secunia.com/advisories/58715
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3290
- http://tools.cisco.com/security/center/viewAlert.x?alertId=34613
- http://www.securityfocus.com/bid/68021
- http://www.securitytracker.com/id/1030444