CVE-2014-3290

The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867.

• CWE-264

• http://secunia.com/advisories/58715Third Party Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3290Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34613Vendor Advisory
• http://www.securityfocus.com/bid/68021Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030444Third Party Advisory, VDB Entry
• http://secunia.com/advisories/58715Third Party Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3290Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34613Vendor Advisory
• http://www.securityfocus.com/bid/68021Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030444Third Party Advisory, VDB Entry

Published

Jun 14, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3283Open redirect vulnerability in Self-Care Client Portal appli…
• CVE-2014-3284Cisco IOS XE on ASR1000 devices, when PPPoE termination is e…
• CVE-2014-3285Cisco Wide Area Application Services (WAAS) 5.3(.5a) and ear…
• CVE-2014-3286The web framework in Cisco WebEx Meeting Server does not pro…
• CVE-2014-3287SQL injection vulnerability in BulkViewFileContentsAction.ja…
• CVE-2014-3289Cross-site scripting (XSS) vulnerability in the web manageme…
• CVE-2014-3291Cisco Wireless LAN Controller (WLC) devices allow remote att…
• CVE-2014-3292The Real Time Monitoring Tool (RTMT) implementation in Cisco…
• CVE-2014-3293Cisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decis…
• CVE-2014-3294Cisco WebEx Meeting Server does not properly restrict the co…
• CVE-2014-3295The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier a…
• CVE-2014-3296The XML programmatic interface (XML PI) in Cisco WebEx Meeti…