CVE-2014-3404

The Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to trigger acceptance of an invalid message via crafted messages, aka Bug ID CSCuq22677.

Score

CVSS 2.0 4.3 Medium

Status

Modified - psirt@cisco.com

Published

2014-10-10

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Ios Xe (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3404