CVE-2023-20080

Cisco IOS and IOS XE Software IPv6 DHCP (DHCPv6) Relay and Server Denial of Service Vulnerability

View on CVE.org
Published Mar 23, 2023 CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Description
A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to insufficient validation of data boundaries. An attacker could exploit this vulnerability by sending crafted DHCPv6 messages to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-24259 A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to insufficient validation of data boundaries. An attacker could exploit this vulnerability by sending crafted DHCPv6 messages to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Weaknesses

Sources

Status
PUBLISHED
Assigner
cisco
Published
Updated
Oct 28, 2024, 4:32 PM
Reserved
Oct 27, 2022, 12:00 AM

View source JSON

Updated
Aug 2, 2024, 8:57 AM

JSON

Status
Modified
Published
Mar 23, 2023, 5:15 PM
Modified
Jun 17, 2026, 5:29 AM

View source JSON

No data.

No data.