CVE-2014-3331: The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11...

Security readout for executives and security teams

This Cisco ASR 5000 PGW flaw can let a remote attacker crash the Session Manager process, causing denial of service. The sources describe service disruption, not data theft or code execution. It matters most to telecom or mobile packet-core environments still running the listed ASR 5000 software versions. Exposure is likely limited to organizations operating Cisco ASR 5000 Series Software as a Packet Data Network Gateway on the listed versions. General Cisco devices, other ASR platforms, and non-PGW roles are not identified as affected in the provided sources. Treat this as a targeted availability risk for packet-core infrastructure. It should be prioritized if affected ASR 5000 PGW systems remain in production, especially where outages would affect subscribers or service-level commitments. Mitigation focus: Inventory Cisco ASR 5000 PGW deployments and record exact software versions.; Review Cisco advisory CVE-2014-3331 and Bug ID CSCuo21914 for vendor fixes or workarounds.; Prioritize upgrades for affected PGW systems supporting customer or carrier traffic..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.