CVE-2014-3396

HIGH · CVSS 7.5 EPSS 1.36%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-10-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2014-3396

Severity

HIGH

CVSS

7.5

EPSS

1.36%

Cisco

Original NVD Description

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133.