CVE-2014-3348
The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified...
The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.
Exploit likelihood
What each source reports
NVD Score used
The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.
- Record
CVE-2014-3348- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.
- Record
CVE-2014-3348- Updated
- 2026-11-02
EUVDEUVD-2014-3361 No score
The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.
- Record
EUVD-2014-3361- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7v92-w294-rhvv No score
The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified...
The SSH module in the Integrated Management Controller (IMC) before 2.3.1 in Cisco Unified Computing System on E-Series blade servers allows remote attackers to cause a denial of service (IMC hang) via a crafted SSH packet, aka Bug ID CSCuo69206.
- Record
GHSA-7v92-w294-rhvv- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
- cisco integrated management controller
- cisco unified computing system e140d
- cisco unified computing system e140dp
- cisco unified computing system e140s m1
- cisco unified computing system e140s m2
- cisco unified computing system e160d
- cisco unified computing system e160dp
- cisco unified computing system en120s m2
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3348 is a medium vulnerability (CVSS 5.0) in Cisco Integrated Management Controller, published September 10, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.58%, the 85th percentile. No source names a fixed version.
References
tools.cisco.com/security/center/viewAlert.x?alertId=35588
securityfocus.com/bid/69652
securitytracker.com/id/1030813
exchange.xforce.ibmcloud.com/vulnerabilities/95782
nvd.nist.gov/vuln/detail/CVE-2014-3348
github.com/advisories/GHSA-7v92-w294-rhvv