CVE-2014-3383: Cisco ASA

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

The IKE implementation in the VPN component in Cisco ASA Software 9.1 before 9.1(5.1) allows remote attackers to cause a denial of service (device reload) via crafted UDP packets, aka Bug ID CSCul36176.

Affected products

• Cisco ASA: version 9.1 only; version 9.1.5 only

Published 2014-10-10. Last modified 2026-06-17.