CVE-2014-3353
Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote...
Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet, aka Bug ID CSCuo95165.
Exploit likelihood
What each source reports
NVD Score used
Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet, aka Bug ID CSCuo95165.
- Record
CVE-2014-3353- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet, aka Bug ID CSCuo95165.
- Record
CVE-2014-3353- Updated
- 2026-11-02
EUVDEUVD-2014-3366 No score
Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet, aka Bug ID CSCuo95165.
- Record
EUVD-2014-3366- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wpc5-gwcm-286j No score
Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote...
Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 packet, aka Bug ID CSCuo95165.
- Record
GHSA-wpc5-gwcm-286j- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-3353 is a high vulnerability (CVSS 7.1) in Cisco Ios Xr, published September 4, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.55%, the 85th percentile. No source names a fixed version.
References
tools.cisco.com/security/center/viewAlert.x?alertId=35559
securityfocus.com/bid/69506
secunia.com/advisories/60205
securitytracker.com/id/1030790
exchange.xforce.ibmcloud.com/vulnerabilities/95623
nvd.nist.gov/vuln/detail/CVE-2014-3353
github.com/advisories/GHSA-wpc5-gwcm-286j