CVE-2013-6692
Cisco IOS XE < 3.8S(2) - Authenticated Denial of Service via AAA Packet
Title source: llmDescription
Cisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP address, which allows remote authenticated users to cause a denial of service (device reload) via an AAA packet that triggers an address requirement, aka Bug ID CSCuh04949.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=31860
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6692
Scores
EPSS
0.0094
EPSS Percentile
57.1%
Details
CWE
CWE-399
Status
published
Products (7)
cisco/ios_xe
3.7.0s
cisco/ios_xe
3.7.1s
cisco/ios_xe
3.7.2s
cisco/ios_xe
3.8.0s
cisco/ios_xe
3.8s\(.0\)
cisco/ios_xe
3.8s\(.1\)
cisco/ios_xe
< 3.8s\(.2\)
Published
Nov 22, 2013
Tracked Since
Feb 18, 2026