CVE-2014-3284: Cisco Asr 1001

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed PPPoE packet, aka Bug ID CSCuo55180.

Affected products

• Cisco Asr 1001
• Cisco Asr 1002
• Cisco Asr 1002-X
• Cisco Asr 1002 Fixed Router
• Cisco Asr 1004
• Cisco Asr 1006
• Cisco Asr 1013
• Cisco Asr 1023 Router
• Cisco IOS XE: affected versions not specified

Published 2014-05-25. Last modified 2026-06-17.