1. Home
  2. CVE Database
  3. CVE-2023-20081
MEDIUM · 6.8

CVE-2023-20081

A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Softwar...

Vulnerability Description

A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient validation of DHCPv6 messages. An attacker could exploit this vulnerability by sending crafted DHCPv6 messages to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Note: To successfully exploit this vulnerability, the attacker would need to either control the DHCPv6 server or be in a man-in-the-middle position.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
CiscoAdaptive Security Appliance Software9.8.1
CiscoFirepower Threat Defense9.8.1
CiscoIos17.8.1
CiscoIos Xe17.8.1
Cisco1100-4G Integrated Services Router-
Cisco1100-4P Integrated Services Router-
Cisco1100-6G Integrated Services Router-
Cisco1100-8P Integrated Services Router-
Cisco1101-4P Integrated Services Router-
Cisco1101 Integrated Services Router-
Cisco1109-2P Integrated Services Router-
Cisco1109-4P Integrated Services Router-
Cisco1109 Integrated Services Router-
Cisco1111X-8P Integrated Services Router-
Cisco1111X Integrated Services Router-
Cisco111X Integrated Services Router-
Cisco1120 Integrated Services Router-
Cisco1131 Integrated Services Router-
Cisco1160 Integrated Services Router-
Cisco4000 Integrated Services Router-

Related Weaknesses (CWE)

CWE-122CWE-787

References

FAQ

What is CVE-2023-20081?

CVE-2023-20081 is a vulnerability with a CVSS score of 6.8 (MEDIUM). A vulnerability in the IPv6 DHCP (DHCPv6) client module of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Softwar...

How severe is CVE-2023-20081?

CVE-2023-20081 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-20081?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Adaptive Security Appliance Software, Cisco Firepower Threat Defense, Cisco Ios, Cisco Ios Xe, Cisco 1100-4G Integrated Services Router.