The Autonomic Networking Infrastructure (ANI) component in Cisco IOS XE does not properly validate certificates, which allows remote attackers to spoof devices via crafted messages, aka Bug ID CSCuq22647.Referenceshttp://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3403