Back
CVE-2014-3335
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC…
Medium4.6EPSS 1.1%
- Published
- Updated
- Reserved
- Assigned by
- cisco
Description
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of service (chip and card hangs) via a crafted packet, aka Bug ID CSCup77750.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium4.6 | AV:A/AC:H/Au:N/C:N/I:N/A:C |
- EPSS (exploitation in 30 days)
- 1.1% · top 34% of all CVEs (3 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.6.
Weakness
Affected products
n/a
- affected n/a
References (6)
- ciscoios-cve20143335-dos(95443) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- 69383 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 60222 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 20140825 Cisco IOS XR Software Packet Parsing Denial of Service Vulnerability (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35416 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 1030757 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2014-3335)Record last updated .