Vulnerability in Cisco 7200 Router

CVE-2004-1111

Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.

EPSS: 0.023 (82.5th percentile) — read the EPSS interpretation.

Affected products

Cisco 7200_router
Cisco 7300_router
Cisco 7500_router
Cisco 7600_router
Cisco Catalyst_7600
Cisco Ios — versions 12.2\(14\)sz, 12.2\(18\)s, 12.2\(20\)ew
Cisco Multiservice_platform_2650
Cisco Multiservice_platform_2650xm
Cisco Multiservice_platform_2651
Cisco Multiservice_platform_2651xm

References

cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
cve@mitre.org (US Government Resource, x_refsource_CERT, third-party-advisory)
cve@mitre.org (x_refsource_CISCO, vendor-advisory)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)