CVE-2014-3276: Cisco Identity Services Engine (ISE) 1.2(.1 patch 2) and earlier does not properly handle deadlock conditio...

Security readout for executives and security teams

CVE-2014-3276 can let an authenticated remote actor disrupt Cisco ISE RADIUS service by triggering a deadlock with crafted accounting traffic from multiple NAS origins. The business risk is loss of RADIUS availability, which can affect network access workflows that depend on ISE. Exposure is most likely in environments still running the listed legacy Cisco ISE versions with RADIUS accounting enabled. The flaw requires a remote authenticated user and traffic sourced from two origins, limiting opportunistic exposure but still relevant for internal or trusted-network threat models. Treat as a moderate availability risk for legacy Cisco ISE environments. Prioritize if ISE is central to network authentication or if many users depend on RADIUS-backed access. Deprioritize only after confirming no affected versions remain. Mitigation focus: Identify any Cisco ISE 1.2 or earlier deployments.; Review Cisco’s advisory for fixed software or supported workarounds.; Prioritize upgrade planning if Cisco identifies a corrected release..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.