Vulnerability in Cisco IOS XE 3.12S mDNS Implementation Allows Information Disclosure and Data Overwrite (CSCun64867)

Vulnerability in Cisco IOS XE 3.12S mDNS Implementation Allows Information Disclosure and Data Overwrite (CSCun64867)

CVE-2014-3290 · MEDIUM Severity

AV:A/AC:L/AU:N/C:P/I:P/A:N

The mDNS implementation in Cisco IOS XE 3.12S does not properly interact with autonomic networking, which allows remote attackers to obtain sensitive networking-services information by sniffing the network or overwrite networking-services data via a crafted mDNS response, aka Bug ID CSCun64867.

Learn more about our Cis Benchmark Audit For Apple Ios.