Read the docs
TI-2014-01744 Aliases CVE-2014-2201GHSA-8j74-4v6m-hgvq

The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and…

Priority LOW 38Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via a large volume of crafted traffic, aka Bug ID CSCtw98915.

Why it matters now

EPSS 0.01906 79th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPEVersionsRoleVendor
cpe:2.3:o:cisco:nx-os:6.0\(1\):*:*:*:*:*:*:*6.0(1)VulnerableCisco
cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*up to 6.2\(5a\)VulnerableCisco
cpe:2.3:o:cisco:nx-os:6.2\(1\):*:*:*:*:*:*:*6.2(1)VulnerableCisco
cpe:2.3:o:cisco:nx-os:6.2\(1n\):*:*:*:*:*:*:*6.2(1n)VulnerableCisco
cpe:2.3:o:cisco:nx-os:6.2\(3\):*:*:*:*:*:*:*6.2(3)VulnerableCisco
cpe:2.3:o:cisco:nx-os:6.2\(3n\):*:*:*:*:*:*:*6.2(3n)VulnerableCisco
  • cpe:2.3:o:cisco:nx-os:6.0\(1\):*:*:*:*:*:*:* Versions 6.0(1) Vulnerable ·Cisco
  • cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* Versions up to 6.2\(5a\) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:6.2\(1\):*:*:*:*:*:*:* Versions 6.2(1) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:6.2\(1n\):*:*:*:*:*:*:* Versions 6.2(1n) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:6.2\(3\):*:*:*:*:*:*:* Versions 6.2(3) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:6.2\(3n\):*:*:*:*:*:*:* Versions 6.2(3n) Vulnerable ·Cisco
Show 3 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:cisco:nx-os:6.2\(5\):*:*:*:*:*:*:*6.2(5)VulnerableCisco
cpe:2.3:h:cisco:mds_9000:*:*:*:*:*:*:*:*all versionsVulnerableCisco
cpe:2.3:h:cisco:mds_9100:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
  • cpe:2.3:o:cisco:nx-os:6.2\(5\):*:*:*:*:*:*:* Versions 6.2(5) Vulnerable ·Cisco
  • cpe:2.3:h:cisco:mds_9000:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Cisco
  • cpe:2.3:h:cisco:mds_9100:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-2201
  2. 2026-10-03 Alias added: GHSA-8j74-4v6m-hgvq

References

Advisory 1

  • TI-2004-00066 The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c… CVSS 3.1HIGH 7.5
  • TI-2013-01038 The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco… CVSS 2.0HIGH 9.3
  • TI-2013-01026 Buffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and… CVSS 2.0HIGH 9.0
  • TI-2013-01025 Multiple buffer overflows in the (1) SNMP and (2) License Manager implementations in… CVSS 2.0HIGH 9.0
  • TI-2013-01024 Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco… CVSS 2.0HIGH 8.3
  • TI-2004-00095 The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos… CVSS 2.0MEDIUM 5.0
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences