CVE-2014-3295

The HSRP implementation in Cisco NX-OS 6.2(2a) and earlier allows remote attackers to bypass authentication and cause a denial of service (group-member state modification and traffic blackholing) via malformed HSRP packets, aka Bug ID CSCup11309.

• CWE-287

• http://secunia.com/advisories/59158Permissions Required
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34585Vendor Advisory
• http://www.securityfocus.com/bid/67983Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030409Third Party Advisory, VDB Entry
• http://secunia.com/advisories/59158Permissions Required
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3295Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=34585Vendor Advisory
• http://www.securityfocus.com/bid/67983Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1030409Third Party Advisory, VDB Entry

Published

Jun 14, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-3289Cross-site scripting (XSS) vulnerability in the web manageme…
• CVE-2014-3290The mDNS implementation in Cisco IOS XE 3.12S does not prope…
• CVE-2014-3291Cisco Wireless LAN Controller (WLC) devices allow remote att…
• CVE-2014-3292The Real Time Monitoring Tool (RTMT) implementation in Cisco…
• CVE-2014-3293Cisco IOS 15.4(3)S0b on ASR901 devices makes incorrect decis…
• CVE-2014-3294Cisco WebEx Meeting Server does not properly restrict the co…
• CVE-2014-3296The XML programmatic interface (XML PI) in Cisco WebEx Meeti…
• CVE-2014-3297Cisco Intelligent Automation for Cloud in Cisco Cloud Portal…
• CVE-2014-3298Form Data Viewer in Cisco Intelligent Automation for Cloud i…
• CVE-2014-3299Cisco IOS allows remote authenticated users to cause a denia…
• CVE-2014-3300The BVSMWeb portal in the web framework in Cisco Unified Com…
• CVE-2014-3301The ProfileAction controller in Cisco WebEx Meetings Server …