Unscored CVE-2013-6692 EUVD-2013-6494GHSA-6vv4-rrfh-pcgh

Cisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated u…

Published Nov 22, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service (device reload) via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=31860
20131121 Cisco IOS XE AAA DHCP Denial of Service Vulnerability vendor-advisory