Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 Relay message, aka Bug ID CSCus55821.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCisco IOS XE
OSCisco3.10s_3.10.0s3.10s_3.10.1s3.10s_3.10.1xbs3.10s_3.10.2s3.10s_3.10.3s3.10s_3.10.4s3.10s_3.10.5s3.10s_3.10.6s3.11s_3.11.0s3.11s_3.11.1s3.11s_3.11.2s3.11s_3.11.3s3.11s_3.11.4s3.12s_3.12.0s3.12s_3.12.1s+ 62 moreNetgear Jr6150 Firmware
OSNetgear< 2017-01-06Samsung X14j Firmware
OSSamsungt-ms14jakucb-1102.5Sun Opensolaris
OSSunsnv_124Zyxel Gs1900 10hp Firmware
OSZyxel< 2.50\(aazi.0\)c0Zzinc Keymouse Firmware
OSZzinc3.08
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
Related vulnerabilities
CVE-2023-20198CRITICAL10.0⚠ KEVPL ✓same product
Cisco IOS XE Web UI — nieautoryzowane tworzenie konta z privilege 15
CVE-2018-0151CRITICAL9.8⚠ KEVPL ✓same product
Buffer overflow w QoS Cisco IOS/IOS XE — RCE i DoS przez UDP 18999
CVE-2017-3881CRITICAL9.8⚠ KEVPL ✓same product
RCE w Cisco IOS/IOS XE – podatność protokołu CMP przez Telnet
CVE-2026-20267CRITICAL9.0PL ✓same product
Nieprawidłowa kontrola dostępu w Cisco IOS XE Software (CVE-2026-20267)
CVE-2026-20272CRITICAL9.8PL ✓same product
Cisco IOS XE — improper neutralization of special elements (CWE-74)