CVE-2014-3335: Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets...

Security readout for executives and security teams

This is a denial-of-service issue in Cisco IOS XR on ASR 9000 routers. A crafted packet with a multicast destination MAC address can trigger chip or card hangs when NetFlow sampling mishandles it. The business impact is network availability disruption on affected routing infrastructure. Exposure is limited to organizations operating Cisco ASR 9000 devices running IOS XR 4.3(.2) or earlier with the affected NetFlow packet handling path reachable by traffic. Treat this as a network availability risk for core or edge routing environments. Priority depends on whether affected ASR 9000 routers are deployed and exposed to untrusted traffic. Without confirmed affected assets, urgency is unknown rather than automatically critical. Mitigation focus: Inventory Cisco ASR 9000 routers and their IOS XR versions.; Review Cisco's security notice for fixed software, SMUs, or official workarounds.; Prioritize upgrades for devices running IOS XR 4.3(.2) or earlier..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.