CVE-2014-3308: Cisco Asr 9000 RSP440 Router

Medium severity, CVSS 6.4. EPSS: 2.8% chance of exploitation in the next 30 days.

Cisco IOS XR on Trident line cards in ASR 9000 devices lacks a static punt policer, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted packets, aka Bug ID CSCun83985.

Affected products

• Cisco Asr 9000 RSP440 Router
• Cisco Asr 9001
• Cisco Asr 9006
• Cisco Asr 9010
• Cisco Asr 9904
• Cisco Asr 9912
• Cisco Asr 9922
• Cisco IOS XR: any version

Published 2014-07-07. Last modified 2026-06-17.