Vulnerability in Cisco iOS

CVE-2015-0708

Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_NA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956.

EPSS: 0.007 (50.4th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 15.4\(3\)s, 15.4\(3\)s1, 15.4\(3\)sn1
  • Cisco Ios_xe — versions 3.13s.0, 3.13s.1, 3.14s.0
  • N/a — versions n/a

Weakness classification (CWE)

References