CVE-2014-3384
Last modified
CVE-2014-3384 is a vulnerability of currently unknown severity. The IKEv2 implementation in Cisco ASA Software 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted packet that is sent during tunnel creation, aka Bug ID CSCum96401.. EPSS estimates a 1.61% chance of exploitation in the next 30 days.
Description
The IKEv2 implementation in Cisco ASA Software 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via a crafted packet that is sent during tunnel creation, aka Bug ID CSCum96401.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Asa | 8.4 |
| Cisco | Asa | 8.4.1 |
| Cisco | Asa | 8.4.2 |
| Cisco | Asa | 8.4.3 |
| Cisco | Asa | 8.4.4 |
| Cisco | Asa | 8.6 |
| Cisco | Asa | 8.6.1 |
| Cisco | Asa | 9.0 |
| Cisco | Asa | 9.1 |
| Cisco | Asa | 9.1.5 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2014-3384?
How severe is CVE-2014-3384?
How do I fix CVE-2014-3384?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2014
- CVE-2014-3378tacacsd in Cisco IOS XR 5.1 and earlier allows remote attack…
- CVE-2014-3379Cisco IOS XR 5.1 and earlier on Network Convergence System 6…
- CVE-2014-3380Cisco Unified Communications Domain Manager Platform Softwar…
- CVE-2014-3381The ZIP inspection engine in Cisco AsyncOS 8.5 and earlier o…
- CVE-2014-3382The SQL*Net inspection engine in Cisco ASA Software 7.2 befo…
- CVE-2014-3383The IKE implementation in the VPN component in Cisco ASA Sof…
- CVE-2014-3385Race condition in the Health and Performance Monitoring (HPM…
- CVE-2014-3386The GPRS Tunneling Protocol (GTP) inspection engine in Cisco…
- CVE-2014-3387The SunRPC inspection engine in Cisco ASA Software 7.2 befor…
- CVE-2014-3388The DNS inspection engine in Cisco ASA Software 9.0 before 9…
- CVE-2014-3389The VPN implementation in Cisco ASA Software 7.2 before 7.2(…
- CVE-2014-3390The Virtual Network Management Center (VNMC) policy implemen…
Are you affected by CVE-2014-3384?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST