« Back to list

CVE-2014-0256

Status: ModifiedMedium (5)—

Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold allow remote attackers to cause a denial of service (iSCSI service outage) by sending many crafted packets, aka "iSCSI Target Remote Denial of Service Vulnerability."

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (2)

Microsoft — Windows Server 2008Microsoft — Windows Server 2012

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2014-0256",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secure@microsoft.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-05-14T11:13:04.320",
  "references": [
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-028",
      "source": "secure@microsoft.com"
    },
    {
      "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-028",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold allow remote attackers to cause a denial of service (iSCSI service outage) by sending many crafted packets, aka \"iSCSI Target Remote Denial of Service Vulnerability.\""
    },
    {
      "lang": "es",
      "value": "Microsoft Windows Server 2008 SP2 y R2 SP1 y Server 2012 Gold permiten a atacantes remotos causar una denegación de servicio (interrupción de servicio iSCSI) mediante el envío de muchos paquetes manipulados, también conocido como 'vulnerabilidad de denegación de servicio remota de objetivo iSCSI.'"
    }
  ],
  "lastModified": "2026-06-17T00:02:39.227",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:datacenter:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "25252F89-6608-4528-84A3-22FF5F4C1B6D"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5BEDE277-49FA-42F2-AA4C-CCDB9AA3C9CA"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:enterprise_x64:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9B15F7D7-162C-4C09-9A8B-CE69C7F0D4F6"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:hpc:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF307058-A746-4EC6-A4A2-41D176A33C3E"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7AE15F6C-80F6-43A6-86DA-B92116A697A0"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:standard:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "143017C2-3D62-4A9B-A7D5-0A14B010D913"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:storage:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00B17DB1-0DF9-4EC3-A6C3-8661EBA40E9C"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:web:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8D4CD8AF-D604-4C64-B5BE-C52B69A0B601"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secure@microsoft.com"
}