CVE-2014-2183: Cisco Asr 1001

Medium severity, CVSS 6.3. EPSS: 1.3% chance of exploitation in the next 30 days.

The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973.

Affected products

• Cisco Asr 1001
• Cisco Asr 1002
• Cisco Asr 1002-X
• Cisco Asr 1002 Fixed Router
• Cisco Asr 1004
• Cisco Asr 1006
• Cisco Asr 1013
• Cisco Asr 1023 Router
• Cisco IOS XE: up to and including 3.10.2s; version 3.10 only; version 3.10.0s only; version 3.10.1s only; version 3.10.1s1 only

Published 2014-04-29. Last modified 2026-06-17.