CVE-2014-3264: Cisco Adaptive Security Appliance (ASA) Software 9.1(.5) and earlier allows remote authenticated users to c...

Security readout for executives and security teams

CVE-2014-3264 can make affected Cisco ASA firewalls reload, causing a denial of service. The source bundle says exploitation requires a remote authenticated user and crafted RADIUS packet attributes. Business impact is possible firewall or VPN service interruption, not documented data theft or code execution. Investigate Cisco ASA deployments running 9.1(.5) or earlier, especially where RADIUS is used for authentication. Exposure depends on whether remote authenticated users can trigger RADIUS-backed authentication flows reaching the ASA. Treat as a resilience issue for firewall and VPN availability. Prioritize if legacy ASA versions protect important remote access, internet edge, or critical network segments. Mitigation focus: Review Cisco advisory guidance for fixed releases or vendor-approved workarounds.; Inventory Cisco ASA devices and identify versions 9.1(.5) or earlier.; Prioritize supported ASA software updates where vulnerable versions are found..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.