Vulnerability in Cisco iOS Xe

CVE-2013-6692

Cisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service (device reload) via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949.

EPSS: 0.009 (57.2th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios_xe — versions 3.7.0s, 3.7.1s, 3.7.2s
  • N/a — versions n/a

Weakness classification (CWE)

References