high8.6
CVE-2023-20080
A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker …
Impact
A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to insufficient validation of data boundaries. An attacker could exploit this vulnerability by sending crafted DHCPv6 messages to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ios | Versions 12.2\(6\)i1, 15.1\(2\)sg, 15.1\(2\)sg1, 15.1\(2\)sg2, 15.1\(2\)sg3, 15.1\(2\)sg4 |
| Cisco | Ios Xe | Versions 3.3.0xo, 3.3.1xo, 3.3.2xo, 3.4.0sg, 3.4.1sg, 3.4.2sg |