CVE-2014-3331

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-08-20 · updated 2026-06-17
Weakness: CWE-20

Description

The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11.0, 12.0, 12.1, 12.2, 14.0, 15.0, 16.x through 16.1.2, and 17.0 allows remote attackers to cause a denial of service (process crash) via a crafted TCP packet, aka Bug ID CSCuo21914.

Affected products

Cisco ASR 5000 Series Aggregation Services Routers: 11.0, 12.0, 12.1, 12.2, 14.0, 15.0 (+4)

References

http://secunia.com/advisories/60706
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3331
http://tools.cisco.com/security/center/viewAlert.x?alertId=35346
http://www.securityfocus.com/bid/69281
http://www.securitytracker.com/id/1030747
https://exchange.xforce.ibmcloud.com/vulnerabilities/95357
http://secunia.com/advisories/60706
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3331
http://tools.cisco.com/security/center/viewAlert.x?alertId=35346
http://www.securityfocus.com/bid/69281
http://www.securitytracker.com/id/1030747
https://exchange.xforce.ibmcloud.com/vulnerabilities/95357

Get alerted when CVE-2014-3331 or the next vulnerability affects your stack