CVE-2014-3327: The EnergyWise module in Cisco IOS 12.2, 15.0, 15.1, 15.2, and 15.4 and IOS XE 3.2.xXO, 3.3.xSG, 3.4.xSG, a...

Security readout for executives and security teams

This Cisco IOS and IOS XE flaw can let a remote attacker crash and reload an affected network device using a crafted IPv4 packet. The main business impact is network interruption, not data theft. The source bundle does not show active exploitation or a CVSS score. Exposure is likely limited to Cisco devices running the listed IOS or IOS XE trains with the EnergyWise module present. The bundle does not identify specific platforms, configurations, authentication requirements, or network reachability conditions. Treat this as a reliability risk for affected Cisco infrastructure. It should be scheduled for remediation ahead of routine maintenance if devices support critical services, but the bundle does not justify emergency priority based on known exploitation. Mitigation focus: Review Cisco advisory cisco-sa-20140806-energywise for fixed releases and workarounds.; Upgrade IOS XE 3.5.xE systems to 3.5.3E or later where applicable.; Map all IOS 12.2, 15.0, 15.1, 15.2, and 15.4 devices for exposure..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.