=====================================================================

                           CERT-Renater

               Note d'Information No. 2014/VULN155
_____________________________________________________________________

DATE                : 07/08/2014

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S):  Cisco IOS, Cisco IOS XE configured for EnergyWise.

======================================================================
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140806-energywise
______________________________________________________________________

Cisco IOS Software and Cisco IOS XE Software EnergyWise Crafted Packet
Denial of Service Vulnerability

Advisory ID: cisco-sa-20140806-energywise

Revision 1.0

For Public Release 2014 August 6 16:00  UTC (GMT)
+---------------------------------------------------------------------

Summary
=======

A vulnerability in the EnergyWise module of Cisco IOS and Cisco IOS XE
Software could allow an unauthenticated, remote attacker to cause a
reload of the affected device.

The vulnerability is due to improper parsing of crafted EnergyWise
packets destined to an affected device. An attacker could exploit this
vulnerability by sending a crafted EnergyWise packet to be processed by
an affected device. An exploit could allow the attacker to cause a
reload of the affected device.


Cisco has released free software updates that address this
vulnerability.

There are no workarounds for this vulnerability.

This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140806-energywise

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================