A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of DHCPv6 messages. An attacker could exploit this vulnerability by sending crafted DHCPv6 messages to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Note: To successfully exploit this vulnerability, the attacker would need to either control the DHCPv6 server or be in a man-in-the-middle position.

Project Subscriptions

Vendors Products
1100-4g Integrated Services Router Subscribe
1100-4p Integrated Services Router Subscribe
1100-6g Integrated Services Router Subscribe
1100-8p Integrated Services Router Subscribe
1101-4p Integrated Services Router Subscribe
1101 Integrated Services Router Subscribe
1109-2p Integrated Services Router Subscribe
1109-4p Integrated Services Router Subscribe
1109 Integrated Services Router Subscribe
1111x-8p Integrated Services Router Subscribe
1111x Integrated Services Router Subscribe
111x Integrated Services Router Subscribe
1120 Integrated Services Router Subscribe
1131 Integrated Services Router Subscribe
1160 Integrated Services Router Subscribe
4000 Integrated Services Router Subscribe
4221 Integrated Services Router Subscribe
4321 Integrated Services Router Subscribe
4331 Integrated Services Router Subscribe
4351 Integrated Services Router Subscribe
4431 Integrated Services Router Subscribe
4451-x Integrated Services Router Subscribe
4451 Integrated Services Router Subscribe
4461 Integrated Services Router Subscribe
8101-32fh Subscribe
8101-32h Subscribe
8102-64h Subscribe
8201-32fh Subscribe
8800 12-slot Subscribe
8800 18-slot Subscribe
8800 4-slot Subscribe
8800 8-slot Subscribe
Adaptive Security Appliance Software Subscribe
Asr 1000 Subscribe
Asr 1000-esp100 Subscribe
Asr 1000-esp100-x Subscribe
Asr 1000-esp200-x Subscribe
Asr 1000-x Subscribe
Asr 1001 Subscribe
Asr 1001-hx Subscribe
Asr 1001-x Subscribe
Asr 1001-x R Subscribe
Asr 1002 Subscribe
Asr 1002-hx Subscribe
Asr 1002-hx R Subscribe
Asr 1002-x Subscribe
Asr 1002-x R Subscribe
Asr 1004 Subscribe
Asr 1006 Subscribe
Asr 1006-x Subscribe
Asr 1009-x Subscribe
Asr 1013 Subscribe
Asr 1023 Subscribe
Asr 900 Subscribe
Asr 9000 Subscribe
Asr 9000v Subscribe
Asr 9001 Subscribe
Asr 9006 Subscribe
Asr 9010 Subscribe
Asr 902 Subscribe
Asr 902u Subscribe
Asr 903 Subscribe
Asr 907 Subscribe
Catalyst 3650 Subscribe
Catalyst 3650-12x48fd-e Subscribe
Catalyst 3650-12x48fd-l Subscribe
Catalyst 3650-12x48fd-s Subscribe
Catalyst 3650-12x48uq Subscribe
Catalyst 3650-12x48uq-e Subscribe
Catalyst 3650-12x48uq-l Subscribe
Catalyst 3650-12x48uq-s Subscribe
Catalyst 3650-12x48ur Subscribe
Catalyst 3650-12x48ur-e Subscribe
Catalyst 3650-12x48ur-l Subscribe
Catalyst 3650-12x48ur-s Subscribe
Catalyst 3650-12x48uz Subscribe
Catalyst 3650-12x48uz-e Subscribe
Catalyst 3650-12x48uz-l Subscribe
Catalyst 3650-12x48uz-s Subscribe
Catalyst 3650-24pd Subscribe
Catalyst 3650-24pd-e Subscribe
Catalyst 3650-24pd-l Subscribe
Catalyst 3650-24pd-s Subscribe
Catalyst 3650-24pdm Subscribe
Catalyst 3650-24pdm-e Subscribe
Catalyst 3650-24pdm-l Subscribe
Catalyst 3650-24pdm-s Subscribe
Catalyst 3650-24ps-e Subscribe
Catalyst 3650-24ps-l Subscribe
Catalyst 3650-24ps-s Subscribe
Catalyst 3650-24td-e Subscribe
Catalyst 3650-24td-l Subscribe
Catalyst 3650-24td-s Subscribe
Catalyst 3650-24ts-e Subscribe
Catalyst 3650-24ts-l Subscribe
Catalyst 3650-24ts-s Subscribe
Catalyst 3650-48fd-e Subscribe
Catalyst 3650-48fd-l Subscribe
Catalyst 3650-48fd-s Subscribe
Catalyst 3650-48fq Subscribe
Catalyst 3650-48fq-e Subscribe
Catalyst 3650-48fq-l Subscribe
Catalyst 3650-48fq-s Subscribe
Catalyst 3650-48fqm Subscribe
Catalyst 3650-48fqm-e Subscribe
Catalyst 3650-48fqm-l Subscribe
Catalyst 3650-48fqm-s Subscribe
Catalyst 3650-48fs-e Subscribe
Catalyst 3650-48fs-l Subscribe
Catalyst 3650-48fs-s Subscribe
Catalyst 3650-48pd-e Subscribe
Catalyst 3650-48pd-l Subscribe
Catalyst 3650-48pd-s Subscribe
Catalyst 3650-48pq-e Subscribe
Catalyst 3650-48pq-l Subscribe
Catalyst 3650-48pq-s Subscribe
Catalyst 3650-48ps-e Subscribe
Catalyst 3650-48ps-l Subscribe
Catalyst 3650-48ps-s Subscribe
Catalyst 3650-48td-e Subscribe
Catalyst 3650-48td-l Subscribe
Catalyst 3650-48td-s Subscribe
Catalyst 3650-48tq-e Subscribe
Catalyst 3650-48tq-l Subscribe
Catalyst 3650-48tq-s Subscribe
Catalyst 3650-48ts-e Subscribe
Catalyst 3650-48ts-l Subscribe
Catalyst 3650-48ts-s Subscribe
Catalyst 3650-8x24pd-e Subscribe
Catalyst 3650-8x24pd-l Subscribe
Catalyst 3650-8x24pd-s Subscribe
Catalyst 3650-8x24uq Subscribe
Catalyst 3650-8x24uq-e Subscribe
Catalyst 3650-8x24uq-l Subscribe
Catalyst 3650-8x24uq-s Subscribe
Catalyst 3850 Subscribe
Catalyst 3850-12s-e Subscribe
Catalyst 3850-12s-s Subscribe
Catalyst 3850-12x48u Subscribe
Catalyst 3850-12xs-e Subscribe
Catalyst 3850-12xs-s Subscribe
Catalyst 3850-16xs-e Subscribe
Catalyst 3850-16xs-s Subscribe
Catalyst 3850-24p-e Subscribe
Catalyst 3850-24p-l Subscribe
Catalyst 3850-24p-s Subscribe
Catalyst 3850-24pw-s Subscribe
Catalyst 3850-24s-e Subscribe
Catalyst 3850-24s-s Subscribe
Catalyst 3850-24t-e Subscribe
Catalyst 3850-24t-l Subscribe
Catalyst 3850-24t-s Subscribe
Catalyst 3850-24u Subscribe
Catalyst 3850-24u-e Subscribe
Catalyst 3850-24u-l Subscribe
Catalyst 3850-24u-s Subscribe
Catalyst 3850-24xs Subscribe
Catalyst 3850-24xs-e Subscribe
Catalyst 3850-24xs-s Subscribe
Catalyst 3850-24xu Subscribe
Catalyst 3850-24xu-e Subscribe
Catalyst 3850-24xu-l Subscribe
Catalyst 3850-24xu-s Subscribe
Catalyst 3850-32xs-e Subscribe
Catalyst 3850-32xs-s Subscribe
Catalyst 3850-48f-e Subscribe
Catalyst 3850-48f-l Subscribe
Catalyst 3850-48f-s Subscribe
Catalyst 3850-48p-e Subscribe
Catalyst 3850-48p-l Subscribe
Catalyst 3850-48p-s Subscribe
Catalyst 3850-48pw-s Subscribe
Catalyst 3850-48t-e Subscribe
Catalyst 3850-48t-l Subscribe
Catalyst 3850-48t-s Subscribe
Catalyst 3850-48u Subscribe
Catalyst 3850-48u-e Subscribe
Catalyst 3850-48u-l Subscribe
Catalyst 3850-48u-s Subscribe
Catalyst 3850-48xs Subscribe
Catalyst 3850-48xs-e Subscribe
Catalyst 3850-48xs-f-e Subscribe
Catalyst 3850-48xs-f-s Subscribe
Catalyst 3850-48xs-s Subscribe
Catalyst 3850-nm-2-40g Subscribe
Catalyst 3850-nm-8-10g Subscribe
Catalyst 8200 Subscribe
Catalyst 8300-1n1s-4t2x Subscribe
Catalyst 8300-1n1s-6t Subscribe
Catalyst 8300-2n2s-4t2x Subscribe
Catalyst 8300-2n2s-6t Subscribe
Catalyst 8500-4qc Subscribe
Catalyst 8500l Subscribe
Catalyst 8510csr Subscribe
Catalyst 8510msr Subscribe
Catalyst 8540csr Subscribe
Catalyst 8540msr Subscribe
Catalyst 9200 Subscribe
Catalyst 9200cx Subscribe
Catalyst 9200l Subscribe
Catalyst 9300 Subscribe
Catalyst 9300-24p-a Subscribe
Catalyst 9300-24p-e Subscribe
Catalyst 9300-24s-a Subscribe
Catalyst 9300-24s-e Subscribe
Catalyst 9300-24t-a Subscribe
Catalyst 9300-24t-e Subscribe
Catalyst 9300-24u-a Subscribe
Catalyst 9300-24u-e Subscribe
Catalyst 9300-24ux-a Subscribe
Catalyst 9300-24ux-e Subscribe
Catalyst 9300-48p-a Subscribe
Catalyst 9300-48p-e Subscribe
Catalyst 9300-48s-a Subscribe
Catalyst 9300-48s-e Subscribe
Catalyst 9300-48t-a Subscribe
Catalyst 9300-48t-e Subscribe
Catalyst 9300-48u-a Subscribe
Catalyst 9300-48u-e Subscribe
Catalyst 9300-48un-a Subscribe
Catalyst 9300-48un-e Subscribe
Catalyst 9300-48uxm-a Subscribe
Catalyst 9300-48uxm-e Subscribe
Catalyst 9300l Subscribe
Catalyst 9300l-24p-4g-a Subscribe
Catalyst 9300l-24p-4g-e Subscribe
Catalyst 9300l-24p-4x-a Subscribe
Catalyst 9300l-24p-4x-e Subscribe
Catalyst 9300l-24t-4g-a Subscribe
Catalyst 9300l-24t-4g-e Subscribe
Catalyst 9300l-24t-4x-a Subscribe
Catalyst 9300l-24t-4x-e Subscribe
Catalyst 9300l-48p-4g-a Subscribe
Catalyst 9300l-48p-4g-e Subscribe
Catalyst 9300l-48p-4x-a Subscribe
Catalyst 9300l-48p-4x-e Subscribe
Catalyst 9300l-48t-4g-a Subscribe
Catalyst 9300l-48t-4g-e Subscribe
Catalyst 9300l-48t-4x-a Subscribe
Catalyst 9300l-48t-4x-e Subscribe
Catalyst 9300l Stack Subscribe
Catalyst 9300lm Subscribe
Catalyst 9300x Subscribe
Catalyst 9400 Subscribe
Catalyst 9400 Supervisor Engine-1 Subscribe
Catalyst 9407r Subscribe
Catalyst 9410r Subscribe
Catalyst 9500 Subscribe
Catalyst 9500h Subscribe
Catalyst 9600 Subscribe
Catalyst 9600 Supervisor Engine-1 Subscribe
Catalyst 9600x Subscribe
Catalyst 9800 Subscribe
Catalyst 9800-40 Subscribe
Catalyst 9800-40 Wireless Controller Subscribe
Catalyst 9800-80 Subscribe
Catalyst 9800-80 Wireless Controller Subscribe
Catalyst 9800-cl Subscribe
Catalyst 9800-l Subscribe
Catalyst 9800-l-c Subscribe
Catalyst 9800-l-f Subscribe
Catalyst 9800 Embedded Wireless Controller Subscribe
Cbr8 Converged Broadband Router Subscribe
Cg418-e Subscribe
Cg522-e Subscribe
Cloud Services Router 1000v Subscribe
Esr-6300-con-k9 Subscribe
Esr-6300-ncp-k9 Subscribe
Ess-3300-24t-con-a Subscribe
Ess-3300-24t-con-e Subscribe
Ess-3300-24t-ncp-a Subscribe
Ess-3300-24t-ncp-e Subscribe
Ess-3300-con-a Subscribe
Ess-3300-con-e Subscribe
Ess-3300-ncp-a Subscribe
Ess-3300-ncp-e Subscribe
Ess9300-10x-e Subscribe
Firepower Threat Defense Subscribe
Ie-3200-8p2s-e Subscribe
Ie-3200-8t2s-e Subscribe
Ie-3300-8p2s-a Subscribe
Ie-3300-8p2s-e Subscribe
Ie-3300-8t2s-a Subscribe
Ie-3300-8t2s-e Subscribe
Ie-3300-8t2x-a Subscribe
Ie-3300-8t2x-e Subscribe
Ie-3300-8u2x-a Subscribe
Ie-3300-8u2x-e Subscribe
Ie-3400-8p2s-a Subscribe
Ie-3400-8p2s-e Subscribe
Ie-3400-8t2s-a Subscribe
Ie-3400-8t2s-e Subscribe
Ie-9310-26s2c Subscribe
Ie-9320-26s2c Subscribe
Integrated Services Virtual Router Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2023-24260 A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of DHCPv6 messages. An attacker could exploit this vulnerability by sending crafted DHCPv6 messages to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Note: To successfully exploit this vulnerability, the attacker would need to either control the DHCPv6 server or be in a man-in-the-middle position.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Fri, 25 Oct 2024 16:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-10-25T16:02:26.498Z

Reserved: 2022-10-27T00:00:00

Link: CVE-2023-20081

cve-icon Vulnrichment

Updated: 2024-08-02T08:57:35.826Z

cve-icon NVD

Status : Modified

Published: 2023-03-23T17:15:14.873

Modified: 2024-11-21T07:40:30.673

Link: CVE-2023-20081

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses