AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-2146

MEDIUM · CVSS 6.5 EPSS 1.26%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-09-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2014-2146
Severity
MEDIUM
CVSS
6.5
EPSS
1.26%
Cisco

Original NVD Description

The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which allows remote attackers to bypass intended resource-access restrictions via spoofed traffic that matches one of these sessions, aka Bug IDs CSCun94946 and CSCun96847.