CVE-2014-3309
- State
- Published
- Severity
- Not scored
- Published
- Jul 9, 2014
- Updated
- Aug 6, 2024
- Reserved
- May 7, 2014
Description
The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 1030549vdb-entry
- 20140708 Cisco IOS Software and Cisco IOS XE Software NTP Access Group Vulnerabilityvendor-advisory
- 68463vdb-entry
- ciscoios-cve20143309-info-disc(94420)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.