CVE-2014-3309: The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command fo...

Security readout for executives and security teams

Cisco IOS and IOS XE could fail to enforce an intended “deny all” NTP access-group setting. A remote party could still make a standard NTP query and bypass time-synchronization restrictions. The source bundle does not provide CVSS, affected versions, or confirmed active exploitation. Exposure is most relevant to Cisco IOS or IOS XE devices running NTP with access-group restrictions intended to block synchronization queries. Exact affected versions are not provided in the source bundle. Treat this as a moderate infrastructure hygiene issue unless Cisco guidance or local exposure shows broader risk. It can undermine time-control assumptions on network devices, which may affect logging, authentication, and operational trust. Mitigation focus: Review Cisco’s security notice for affected releases, fixes, and supported workarounds.; Inventory Cisco IOS and IOS XE devices providing or querying NTP.; Audit NTP access-group configurations intended to deny all access..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.