CVE-2014-3276 — Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices, which allows remote authenticated users to cause a denial of service (RADIUS outage) by sourcing these packets from two origins, aka Bug ID CSCuo56780

Back Back to CVE browser

MEDIUM

Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices, which allows remote authenticated users to cause a denial of service (RADIUS outage) by sourcing these packets from two origins, aka Bug ID CSCuo56780

Published May 23, 2014

4.0

MEDIUM

CVSS 2.0

EPSS 2.19%

Description

Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditions during reception of crafted RADIUS accounting packets from multiple NAS devices, which allows remote authenticated users to cause a denial of service (RADIUS outage) by sourcing these packets from two origins, aka Bug ID CSCuo56780.

Affected products

Remediation

No remediation recorded yet.

Metrics

2.19% 0.02190

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.02190

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (10 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	2.19% (0.02190)	81.77th	v5 (v2026.06.15)
Jun 15, 2026	2.19% (0.02190)	80.02th	v5 (v2026.06.15)
Mar 17, 2025	0.60% (0.00604)	67.75th	v4 (v2025.03.14)
Dec 12, 2024	0.21% (0.00206)	59.49th	v3 (v2023.03.01)
Jun 14, 2024	0.21% (0.00206)	58.78th	v3 (v2023.03.01)
Mar 7, 2023	0.21% (0.00206)	56.76th	v3 (v2023.03.01)
Mar 6, 2023	1.06% (0.01061)	52.82th	v2 (v2022.01.01)
Sep 19, 2022	1.06% (0.01061)	51.19th	v2 (v2022.01.01)
Apr 1, 2022	1.06% (0.01061)	49.19th	v2 (v2022.01.01)
Feb 4, 2022	1.06% (0.01061)	28.23th	v2 (v2022.01.01)

Weaknesses (1)

CWE-399

References (3)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3276
vendor-advisoryx_refsource_CISCOVendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34329
x_refsource_CONFIRMVendor Advisory
http://www.securitytracker.com/id/1030274
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3276		vendor-advisoryx_refsource_CISCOVendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=34329		x_refsource_CONFIRMVendor Advisory
http://www.securitytracker.com/id/1030274		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published May 23, 2014

Updated Aug 6, 2024

Reserved May 7, 2014

Link CVE-2014-3276

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2014-3276

Red Hat

Severity n/a

Public date n/a

Links CVE-2014-3276