CVEvulnerability
CVE-2014-3331
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11.0, 12.0, 12.1, 12.2, 14.0, 15.0, 16.x through 16.1.2, and 17.0 allows remote attackers to cause a denial of service (process crash) via a crafted TCP packet, aka Bug ID CSCuo21914.
Affected configurations
• cisco asr 5000 series software 11.0
• cisco asr 5000 series software 12.0
• cisco asr 5000 series software 12.1
• cisco asr 5000 series software 12.2
• cisco asr 5000 series software 14.0
• cisco asr 5000 series software 15.0
• cisco asr 5000 series software 16.1.0
• cisco asr 5000 series software 16.1.1
• cisco asr 5000 series software 16.1.2
• cisco asr 5000 series software 17.0.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/60706 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3331 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35346 Vendor Advisory
- http://www.securityfocus.com/bid/69281 www.securityfocus.com
- http://www.securitytracker.com/id/1030747 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95357 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/60706 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3331 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35346 Vendor Advisory
- http://www.securityfocus.com/bid/69281 www.securityfocus.com
- http://www.securitytracker.com/id/1030747 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95357 exchange.xforce.ibmcloud.com