CVE-2014-3284: Input Validation
Cisco IOS XE on ASR1000 devices, when PPPoE termination is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed PPPoE packet, aka Bug ID CSCuo55180.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3284?
CVE-2014-3284 is classified as a medium severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2014-3284?
To mitigate CVE-2014-3284, update your Cisco IOS XE or ASR1000 device software to the latest version that addresses this vulnerability.
Which devices are affected by CVE-2014-3284?
CVE-2014-3284 affects Cisco IOS XE on ASR1000 devices, including models ASR 1001, 1002, 1004, 1006, 1013, and 1023.
What impact does CVE-2014-3284 have on affected devices?
CVE-2014-3284 allows remote attackers to send malformed PPPoE packets causing the device to reload, resulting in a denial of service.
Is there a workaround for CVE-2014-3284?
Disabling PPPoE termination on the affected Cisco devices can serve as an immediate workaround until the vulnerability is patched.