CVE-2014-2183 — Improper Input Validation in Cisco IOS XE

CWE-20 — Improper Input ValidationCWE-3994 documents4 sources
Severity
6.3MEDIUMNVD
EPSS
0.3%
top 47.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco IOS XE
Timeline
PublishedApr 29
Latest updateMay 13

Description

The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 6.8 | Impact: 6.9

Affected Packages1 packages

▶NVDcisco/ios_xe3.10.2s+4

🔴Vulnerability Details

2
GHSA
GHSA-g543-f6ff-6mj2: The L2TP module in Cisco IOS XE 3↗2022-05-13
▶
CVEList
CVE-2014-2183: The L2TP module in Cisco IOS XE 3↗2014-04-29
▶

📋Vendor Advisories

1
Cisco
Cisco IOS XE Software Malformed L2TP Packet Vulnerability↗2014-04-28
▶
CVE-2014-2183 — Improper Input Validation in Cisco | cvebase