CVE-2014-3309: Cisco IOS
Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.
The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318.
Affected products
Published 2014-07-09. Last modified 2026-06-17.