CVE-2014-2144: Cisco IOS XR

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Cisco IOS XR does not properly throttle ICMPv6 redirect packets, which allows remote attackers to cause a denial of service (IPv4 and IPv6 transit outage) via crafted redirect messages, aka Bug ID CSCum14266.

Affected products

• Cisco IOS XR: any version

Published 2014-04-05. Last modified 2026-06-17.