rainbutterfly/cve_corpus huggingface dataset:
CVE-2014-3266 
Cross-site scripting (XSS) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun65189.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-23T22:00:00.000Z
CVE-2014-3267 
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make unspecified changes, aka Bug ID CSCuo46427.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-23T22:00:00.000Z
CVE-2014-3268 
Cisco IOS 15.2(4)M4 on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of service (input-queue consumption and traffic-processing outage) via crafted RTCP packets, aka Bug ID CSCuj72215.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-20T10:00:00.000Z
CVE-2014-3269 
The SNMP module in Cisco IOS XE 3.5E allows remote authenticated users to cause a denial of service (device reload) by polling frequently, aka Bug ID CSCug65204.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-20T10:00:00.000Z
CVE-2014-3270 
The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (process hang) via a malformed packet, aka Bug ID CSCul80924.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-20T10:00:00.000Z
CVE-2014-3271 
The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device crash) via a malformed packet, aka Bug IDs CSCum85558, CSCum20949, CSCul61849, and CSCul71149.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-20T10:00:00.000Z
CVE-2014-3272 
The Agent in Cisco Tidal Enterprise Scheduler (TES) 6.1 and earlier allows local users to gain privileges via crafted Tidal Job Buffers (TJB) parameters, aka Bug ID CSCuo33074.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-23T22:00:00.000Z
CVE-2014-3273 
The LLDP implementation in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a malformed packet, aka Bug ID CSCum96282.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-20T10:00:00.000Z
CVE-2014-3274 
Cisco TelePresence System (CTS) 6.0(.5)(5) and earlier falls back to HTTP when certain HTTPS sessions cannot be established, which allows man-in-the-middle attackers to obtain sensitive directory information by leveraging a network position between CTS and Cisco Unified Communications Manager (UCM) to block HTTPS traffic, aka Bug ID CSCuj26326.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-23T22:00:00.000Z
CVE-2014-3275 
SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCul21337.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-23T22:00:00.000Z
CVE-2014-3276 
Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices, which allows remote authenticated users to cause a denial of service (RADIUS outage) by sourcing these packets from two origins, aka Bug ID CSCuo56780.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-23T22:00:00.000Z
CVE-2014-3277 
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote authenticated users to obtain sensitive user and group information by leveraging Location Administrator privileges and entering a crafted URL, aka Bug ID CSCum77005.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-29T17:00:00.000Z
CVE-2014-3278 
The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attackers to enumerate accounts by visiting an unspecified BVSMWeb web page, aka Bug IDs CSCun39619 and CSCun45572.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-08T16:00:00.000Z
CVE-2014-3279 
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote attackers to enumerate account names via a crafted URL, aka Bug IDs CSCun39631 and CSCun39643.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-29T17:00:00.000Z
CVE-2014-3280 
The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote authenticated users to obtain potentially sensitive user information by visiting an unspecified Administration GUI web page, aka Bug IDs CSCun46045 and CSCun46116.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-03T01:00:00.000Z
CVE-2014-3281 
The web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) does not properly implement access control, which allows remote attackers to obtain potentially sensitive user information by visiting an unspecified BVSMWeb web page, aka Bug IDs CSCun46071 and CSCun46101.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-08T16:00:00.000Z
CVE-2014-3282 
The Administration GUI in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier does not properly implement access control, which allows remote authenticated users to obtain sensitive number-translation information by leveraging Location Administrator privileges and entering a crafted URL, aka Bug ID CSCum76930.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-29T17:00:00.000Z
CVE-2014-3283 
Open redirect vulnerability in Self-Care Client Portal applications in the web framework in VOSS in Cisco Unified Communications Domain Manager (CDM) 9.0(.1) and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka Bug ID CSCun79731.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-29T17:00:00.000Z
CVE-2014-3284 
Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed PPPoE packet, aka Bug ID CSCuo55180.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-25T22:00:00.000Z
CVE-2014-3285 
Cisco Wide Area Application Services (WAAS) 5.3(.5a) and earlier, when SharePoint acceleration is enabled, does not properly parse SharePoint responses, which allows remote attackers to cause a denial of service (application-optimization handler reload) via a crafted SharePoint application, aka Bug ID CSCue47674.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-29T17:00:00.000Z
CVE-2014-3286 
The web framework in Cisco WebEx Meeting Server does not properly restrict the content of reply messages, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug IDs CSCuj81685, CSCuj81688, CSCuj81665, CSCuj81744, and CSCuj81661.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-08T16:00:00.000Z
CVE-2014-3287 
SQL injection vulnerability in BulkViewFileContentsAction.java in the Java interface in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to execute arbitrary SQL commands via crafted filename parameters in a URL, aka Bug ID CSCuo17337.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-10T10:00:00.000Z
CVE-2014-3289 
Cross-site scripting (XSS) vulnerability in the web management interface in Cisco AsyncOS on the Email Security Appliance (ESA) 8.0, Web Security Appliance (WSA) 8.0 (.5 Hot Patch 1) and earlier, and Content Security Management Appliance (SMA) 8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, as demonstrated by the date_range parameter to monitor/reports/overview on the IronPort ESA, aka Bug IDs CSCun07998, CSCun07844, and CSCun07888.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-10T10:00:00.000Z
CVE-2014-3290 
The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-14T10:00:00.000Z
CVE-2014-3291 
Cisco Wireless LAN Controller (WLC) devices allow remote attackers to cause a denial of service (NULL pointer dereference and device restart) via a zero value in Cisco Discovery Protocol packet data that is not properly handled during SNMP polling, aka Bug ID CSCuo12321.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-08T16:00:00.000Z
CVE-2014-3292 
The Real Time Monitoring Tool (RTMT) implementation in Cisco Unified Communications Manager (Unified CM) allows remote authenticated users to (1) read or (2) delete arbitrary files via a crafted URL, aka Bug IDs CSCuo17302 and CSCuo17199.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-10T10:00:00.000Z
CVE-2014-3293 
Cisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decisions to use the CPU for IPv4 packet processing, which allows remote attackers to cause a denial of service (BGP neighbor flapping) by sending many crafted IPv4 packets, aka Bug ID CSCuo29736.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-28T19:00:00.000Z
CVE-2014-3294 
Cisco WebEx Meeting Server does not properly restrict the content of URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuj81691.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-10T10:00:00.000Z
CVE-2014-3295 
The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-14T01:00:00.000Z
CVE-2014-3296 
The XML programmatic interface (XML PI) in Cisco WebEx Meeting Server 1.5(.1.131) and earlier allows remote authenticated users to obtain sensitive meeting information via a crafted URL, aka Bug ID CSCum03527.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-21T15:00:00.000Z
CVE-2014-3297 
Cisco Intelligent Automation for Cloud in Cisco Cloud Portal does not properly restrict the content of MyServices action URLs, which allows remote authenticated users to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug IDs CSCui36937, CSCui37004, and CSCui36927.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T10:00:00.000Z
CVE-2014-3298 
Form Data Viewer in Cisco Intelligent Automation for Cloud in Cisco Cloud Portal places passwords in form data, which allows remote authenticated users to obtain sensitive information by reading HTML source code, aka Bug ID CSCui36976.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T10:00:00.000Z
CVE-2014-3299 
Cisco IOS allows remote authenticated users to cause a denial of service (device reload) via malformed IPsec packets, aka Bug ID CSCui79745.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-06-25T10:00:00.000Z
CVE-2014-3300 
The BVSMWeb portal in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 10 does not properly implement access control, which allows remote attackers to modify user information via a crafted URL, aka Bug ID CSCum77041.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-07T10:00:00.000Z
CVE-2014-3301 
The ProfileAction controller in Cisco WebEx Meetings Server (CWMS) 1.5(.1.131) and earlier allows remote attackers to obtain sensitive information by reading stack traces in returned messages, aka Bug ID CSCuj81700.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-26T10:00:00.000Z
CVE-2014-3302 
user.php in Cisco WebEx Meetings Server 1.5(.1.131) and earlier does not properly implement the token timer for authenticated encryption, which allows remote attackers to obtain sensitive information via a crafted URL, aka Bug ID CSCuj81708.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-01T01:00:00.000Z
CVE-2014-3303 
The web framework in Cisco WebEx Meetings Server does not properly restrict the content of query strings, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuj81713.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-28T17:00:00.000Z
CVE-2014-3304 
The OutlookAction Class in Cisco WebEx Meetings Server allows remote attackers to enumerate user accounts by entering crafted URLs and examining the returned messages, aka Bug ID CSCuj81722.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-28T17:00:00.000Z
CVE-2014-3305 
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuj81735.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-26T10:00:00.000Z
CVE-2014-3306 
The web server on Cisco DPC3010, DPC3212, DPC3825, DPC3925, DPQ3925, EPC3010, EPC3212, EPC3825, and EPC3925 Wireless Residential Gateway products allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCup40808.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-18T01:00:00.000Z
CVE-2014-3307 
The DHCP client implementation in Universal Small Cell firmware on Cisco Small Cell products allows remote attackers to execute arbitrary commands via crafted DHCP messages, aka Bug ID CSCup47513.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-02T10:00:00.000Z
CVE-2014-3308 
Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets, aka Bug ID CSCun83985.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-07T10:00:00.000Z
CVE-2014-3309 
The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-09T10:00:00.000Z
CVE-2014-3310 
The File Transfer feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center does not verify that a requested file was an offered file, which allows remote attackers to read arbitrary files via a modified request, aka Bug IDs CSCup62442 and CSCup58463.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-10T10:00:00.000Z
CVE-2014-3311 
Heap-based buffer overflow in the file-sharing feature in WebEx Meetings Client in Cisco WebEx Meetings Server and WebEx Meeting Center allows remote attackers to execute arbitrary code via crafted data, aka Bug IDs CSCup62463 and CSCup58467.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-10T10:00:00.000Z
CVE-2014-3312 
The debug console interface on Cisco Small Business SPA300 and SPA500 phones does not properly perform authentication, which allows local users to execute arbitrary debug-shell commands, or read or modify data in memory or a filesystem, via direct access to this interface, aka Bug ID CSCun77435.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-09T10:00:00.000Z
CVE-2014-3313 
Cross-site scripting (XSS) vulnerability in the web user interface on Cisco Small Business SPA300 and SPA500 phones allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuo52582.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-09T10:00:00.000Z
CVE-2014-3314 
Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote attackers to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-01-14T19:00:00.000Z
CVE-2014-3315 
Cross-site scripting (XSS) vulnerability in viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCup76308.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-10T10:00:00.000Z
CVE-2014-3316 
The Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to bypass intended upload restrictions via a crafted parameter, aka Bug ID CSCup76297.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-10T10:00:00.000Z
CVE-2014-3317 
Directory traversal vulnerability in the Multiple Analyzer in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager 10.0(1) allows remote authenticated users to delete arbitrary files via a crafted URL, aka Bug ID CSCup76314.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-14T21:00:00.000Z
CVE-2014-3318 
Directory traversal vulnerability in dna/viewfilecontents.do in the Dialed Number Analyzer (DNA) component in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup76318.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-10T10:00:00.000Z
CVE-2014-3319 
Directory traversal vulnerability in the Real-Time Monitoring Tool (RTMT) in Cisco Unified Communications Manager (CM) 10.0(1) allows remote authenticated users to read arbitrary files via a crafted URL, aka Bug ID CSCup57676.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-14T21:00:00.000Z
CVE-2014-3320 
Multiple open redirect vulnerabilities in the admin web interface in the web framework in Cisco Unified Communications Domain Manager (CDM) 8.1(.4) and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via crafted URLs for unspecified scripts, aka Bug ID CSCuo48835.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-18T01:00:00.000Z
CVE-2014-3321 
Cisco IOS XR 4.3.4 and earlier on ASR 9000 devices, when bridge-group virtual interface (BVI) routing is enabled, allows remote attackers to cause a denial of service (chip and card hangs) via a series of crafted MPLS packets, aka Bug ID CSCuo91149.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-18T01:00:00.000Z
CVE-2014-3322 
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of IP packets, which allows remote attackers to cause a denial of service (chip and card hangs) via malformed (1) IPv4 or (2) IPv6 packets, aka Bug ID CSCuo68417.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-24T14:00:00.000Z
CVE-2014-3323 
Directory traversal vulnerability in Cisco Unified Contact Center Enterprise allows remote authenticated users to read arbitrary web-root files via a crafted URL, aka Bug ID CSCun25262.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-18T01:00:00.000Z
CVE-2014-3324 
Multiple cross-site scripting (XSS) vulnerabilities in the login page in the administrative web interface in Cisco TelePresence Server Software 4.0(2.8) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCup90060.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-26T10:00:00.000Z
CVE-2014-3325 
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified Customer Voice Portal (CVP) allow remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug IDs CSCuh61711, CSCuh61720, CSCuh61723, CSCuh61726, CSCuh61727, CSCuh61731, and CSCuh61733.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-19T19:00:00.000Z
CVE-2014-3326 
SQL injection vulnerability in the web framework in Cisco Security Manager 4.5 and 4.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCup26957.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-26T10:00:00.000Z
CVE-2014-3327 
The EnergyWise module in Cisco IOS 12.2, 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.2.xXO, 3.3.xSG, 3.4.xSG, and 3.5.xE before 3.5.3E allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 packet, aka Bug ID CSCup52101.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-11T22:00:00.000Z
CVE-2014-3328 
The Intercluster Sync Agent Service in Cisco Unified Presence Server allows remote attackers to cause a denial of service via a TCP SYN flood, aka Bug ID CSCun34125.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-26T10:00:00.000Z
CVE-2014-3329 
Cross-site scripting (XSS) vulnerability in the web-server component in Cisco Prime Data Center Network Manager (DCNM) 6.3(2) and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCum86620.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-07-29T20:00:00.000Z
CVE-2014-3330 
Cisco NX-OS 6.1(2)I2(1) on Nexus 9000 switches does not properly process packet-drop policy checks for logged packets, which allows remote attackers to bypass intended access restrictions via a flood of packets matching a policy that contains the log keyword, aka Bug ID CSCuo02489.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-08-11T22:00:00.000Z