A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to insufficient validation of data boundaries. An attacker could exploit this vulnerability by sending crafted DHCPv6 messages to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:40
Type | Values Removed | Values Added |
---|---|---|
References | () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-dhcpv6-dos-44cMvdDKÂ - Vendor Advisory | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.6 |
Information
Published : 2023-03-23 17:15
Updated : 2024-11-21 07:40
NVD link : CVE-2023-20080
Mitre link : CVE-2023-20080
CVE.ORG link : CVE-2023-20080
JSON object : View
Products Affected
cisco
- ios_xe
- ios
CWE
CWE-129
Improper Validation of Array Index