CVE-2014-2183
Cisco IOS XE < 3.10.2s - Authenticated Denial of Service via Malformed L2TP Packet
Title source: llmDescription
The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2183
Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=33971
Scores
EPSS
0.0132
EPSS Percentile
67.5%
Details
CWE
CWE-20
Status
published
Products (13)
cisco/asr_1001
cisco/asr_1002
cisco/asr_1002-x
cisco/asr_1002_fixed_router
cisco/asr_1004
cisco/asr_1006
cisco/asr_1013
cisco/asr_1023_router
cisco/ios_xe
3.10
cisco/ios_xe
3.10.0s
... and 3 more
Published
Apr 29, 2014
Tracked Since
Feb 18, 2026