Lucene search

K
nvd[email protected]NVD:CVE-2014-2183
HistoryApr 29, 2014 - 10:37 a.m.

CVE-2014-2183

2014-04-2910:37:04
CWE-20
web.nvd.nist.gov
5

CVSS2

6.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:N/I:N/A:C

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

44.8%

The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973.

Affected configurations

Nvd
Node
ciscoios_xeRange3.10.2s
OR
ciscoios_xeMatch3.10
OR
ciscoios_xeMatch3.10.0s
OR
ciscoios_xeMatch3.10.1s
OR
ciscoios_xeMatch3.10.1s1
AND
ciscoasr_1001Match-
OR
ciscoasr_1002Match-
OR
ciscoasr_1002-xMatch-
OR
ciscoasr_1002_fixed_routerMatch-
OR
ciscoasr_1004Match-
OR
ciscoasr_1006Match-
OR
ciscoasr_1013Match-
OR
ciscoasr_1023_routerMatch-
VendorProductVersionCPE
ciscoios_xe*cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*
ciscoios_xe3.10cpe:2.3:o:cisco:ios_xe:3.10:*:*:*:*:*:*:*
ciscoios_xe3.10.0scpe:2.3:o:cisco:ios_xe:3.10.0s:*:*:*:*:*:*:*
ciscoios_xe3.10.1scpe:2.3:o:cisco:ios_xe:3.10.1s:*:*:*:*:*:*:*
ciscoios_xe3.10.1s1cpe:2.3:o:cisco:ios_xe:3.10.1s1:*:*:*:*:*:*:*
ciscoasr_1001-cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*
ciscoasr_1002-cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*
ciscoasr_1002-x-cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*
ciscoasr_1002_fixed_router-cpe:2.3:h:cisco:asr_1002_fixed_router:-:*:*:*:*:*:*:*
ciscoasr_1004-cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 131

CVSS2

6.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:N/I:N/A:C

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

44.8%

Related for NVD:CVE-2014-2183