A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to unexpectedly reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient input validation during processing of CIP packets. An attacker could exploit this vulnerability by sending a malformed CIP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to unexpectedly reload, resulting in a DoS condition.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HCisco 1000 Integrated Services Router
HWCiscoall versionsCisco 1100 4g Integrated Services Router
HWCiscoall versionsCisco 1100 4p Integrated Services Router
HWCiscoall versionsCisco 1100 6g Integrated Services Router
HWCiscoall versionsCisco 1100 8p Integrated Services Router
HWCiscoall versionsCisco 1100 Integrated Services Router
HWCiscoall versionsCisco 1101 4p Integrated Services Router
HWCiscoall versionsCisco 1101 Integrated Services Router
HWCiscoall versionsCisco 1109 2p Integrated Services Router
HWCiscoall versionsCisco 1109 4p Integrated Services Router
HWCiscoall versionsCisco 1109 Integrated Services Router
HWCiscoall versionsCisco 1111x 8p Integrated Services Router
HWCiscoall versionsCisco 1111x Integrated Services Router
HWCiscoall versionsCisco 1120 Integrated Services Router
HWCiscoall versionsCisco 1131 Integrated Services Router
HWCiscoall versionsCisco 1160 Integrated Services Router
HWCiscoall versionsCisco 4221 Integrated Services Router
HWCiscoall versionsCisco 4321 Integrated Services Router
HWCiscoall versionsCisco 4331 Integrated Services Router
HWCiscoall versionsCisco 4351 Integrated Services Router
HWCiscoall versionsCisco 4431 Integrated Services Router
HWCiscoall versionsCisco 4451 Integrated Services Router
HWCiscoall versionsCisco 4451 X Integrated Services Router
HWCiscoall versionsCisco 4461 Integrated Services Router
HWCiscoall versionsCisco Asr 1000 Esp100
HWCiscoall versionsCisco Asr 1000 X
HWCiscoall versionsCisco Asr 1001
HWCiscoall versionsCisco Asr 1001 Hx
HWCiscoall versionsCisco Asr 1001 Hx R
HWCiscoall versionsCisco Asr 1001 X
HWCiscoall versions
Related vulnerabilities
Cisco IOS XE Web UI — nieautoryzowane tworzenie konta z privilege 15
Buffer overflow w QoS Cisco IOS/IOS XE — RCE i DoS przez UDP 18999
Buffer overflow w DHCP relay Cisco IOS — RCE bez uwierzytelnienia
RCE w Cisco IOS/IOS XE – podatność protokołu CMP przez Telnet
Nieprawidłowa kontrola dostępu w Cisco IOS XE Software (CVE-2026-20267)