2.1.3

DATE	CVE	VULNERABILITY TITLE	RISK
2014-04-29	CVE-2014-2183	Improper Input Validation vulnerability in Cisco products The L2TP module in Cisco IOS XE 3.10S(.2) and earlier on ASR 1000 routers allows remote authenticated users to cause a denial of service (ESP card reload) via a malformed L2TP packet, aka Bug ID CSCun09973. network cisco CWE-20	6.3
2014-04-24	CVE-2012-5723	Improper Input Validation vulnerability in Cisco products Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation, aka Bug ID CSCub55948. low complexity cisco CWE-20	6.1
2013-04-11	CVE-2013-1165	Improper Input Validation vulnerability in Cisco products Cisco IOS XE 2.x and 3.x before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) allows remote attackers to cause a denial of service (card reload) by sending many crafted L2TP packets, aka Bug ID CSCtz23293. network low complexity cisco CWE-20	7.8