CVE-2014-2183

Published: Apr 29, 2014Modified: May 6, 2026

6.3

Vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Exploitability: 6.8 / Impact: 6.9

Source: NVD

Description

The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973.

Affected (13)

Products: Cisco: Ios Xe, Asr 1001, Asr 1002, Asr 1002 X, Asr 1002 Fixed Router, Asr 1004, Asr 1006, Asr 1013, Asr 1023 Router

9 products

Asr 1002 Fixed Router

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios Xe	version ≤ 3.10.2s
Cisco Ios Xe	Version 3.10.0s
Cisco Ios Xe	Version 3.10.1s1
Cisco Ios Xe	Version 3.10.1s
Cisco Ios Xe	Version 3.10
Cisco Asr 1001	All versions
Cisco Asr 1002	All versions
Cisco Asr 1002 X	All versions
Cisco Asr 1002 Fixed Router	All versions
Cisco Asr 1004	All versions
Cisco Asr 1006	All versions
Cisco Asr 1013	All versions
Cisco Asr 1023 Router	All versions