CVE-2013-6692 — Cisco IOS XE vulnerability

CWE-3994 documents4 sources
Severity
6.3MEDIUMNVD
EPSS
0.3%
top 47.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco IOS XE
Timeline
PublishedNov 22
Latest updateMay 17

Description

Cisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service (device reload) via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949.

CVSS vector

AV:N/AC:M/C:N/I:N/A:CExploitability: 6.8 | Impact: 6.9

Affected Packages1 packages

▶NVDcisco/ios_xe3.8s\(.2\)+6

🔴Vulnerability Details

2
GHSA
GHSA-6vv4-rrfh-pcgh: Cisco IOS XE 3↗2022-05-17
▶
CVEList
CVE-2013-6692: Cisco IOS XE 3↗2013-11-22
▶

📋Vendor Advisories

1
Cisco
Cisco IOS XE Software AAA DHCP Denial of Service Vulnerability↗2013-11-21
▶
CVE-2013-6692 — Cisco IOS XE vulnerability | cvebase