CVE-2014-2183

The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973.

Score

CVSS 2.0 6.3 Medium

Status

Modified - psirt@cisco.com

Published

2014-04-29

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Asr 1001 (Cisco)
• Asr 1002 (Cisco)
• Asr 1002-x (Cisco)
• Asr 1002 Fixed Router (Cisco)
• Asr 1004 (Cisco)
• Asr 1006 (Cisco)
• Asr 1013 (Cisco)
• Asr 1023 Router (Cisco)
• Ios Xe (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2183
• http://tools.cisco.com/security/center/viewAlert.x?alertId=33971