8.6
High
CVE-2024-20259 A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to…
Description
A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to a crafted IPv4 DHCP request packet being mishandled when endpoint analytics are enabled. An attacker could exploit this vulnerability by sending a crafted DHCP request through an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition. Note: The attack vector is listed as network because a DHCP relay anywhere on the network could allow exploits from networks other than the adjacent one.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IOS XE Software 17.12 | 17.12.1w → 17.12.1 | No fix stated |
| Cisco IOS XE Software 17.11 | 17.11.1a → 17.11.99SW | No fix stated |
| Cisco IOS XE Software 17.10 | 17.10.1a → 17.10.1 | No fix stated |
| Cisco IOS XE Software 17.9 | 17.9.1w → 17.9.4 | No fix stated |
| Cisco IOS XE Software 17.8 | 17.8.1a → 17.8.1 | No fix stated |
| Cisco IOS XE Software 17.7 | 17.7.1a → 17.7.2 | No fix stated |
| Cisco IOS XE Software 17.6 | 17.6.1w → 17.6.6 | No fix stated |
| Cisco IOS XE Software 17.5 | 17.5.1a → 17.5.1 | No fix stated |
| Cisco IOS XE Software 17.4 | 17.4.1a → 17.4.2 | No fix stated |
Show the 15 other branches Hide the 15 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IOS XE Software 17.3 | 17.3.1w → 17.3.8 | No fix stated |
| Cisco IOS XE Software 17.2 | 17.2.1r → 17.2.3 | No fix stated |
| Cisco IOS XE Software 17.1 | 17.1.1s → 17.1.3 | No fix stated |
| ios_xe 17.12 | 17.12.1w → 17.12.1 | No fix stated |
| ios_xe 17.11 | 17.11.1a → 17.11.99sw | No fix stated |
| ios_xe 17.10 | 17.10.1a → 17.10.1 | No fix stated |
| ios_xe 17.9 | 17.9.1w → 17.9.4 | No fix stated |
| ios_xe 17.8 | 17.8.1a → 17.8.1 | No fix stated |
| ios_xe 17.7 | 17.7.1a → 17.7.2 | No fix stated |
| ios_xe 17.6 | 17.6.1w → 17.6.6 | No fix stated |
| ios_xe 17.5 | 17.5.1a → 17.5.1 | No fix stated |
| ios_xe 17.4 | 17.4.1a → 17.4.2 | No fix stated |
| ios_xe 17.3 | 17.3.1w → 17.3.8 | No fix stated |
| ios_xe 17.2 | 17.2.1r → 17.2.3 | No fix stated |
| ios_xe 17.1 | 17.1.1s → 17.1.3 | No fix stated |
References
- cisco-sa-dhcp-dos-T3CXPO9z sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco IOS XE Software
The 248 CVEs of Cisco IOS XE Software →
CVE-2026-20311
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote…
6.3
Medium
CVE-2026-20301
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of…
8.6
High
CVE-2026-20308
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote…
4.3
Medium
CVE-2026-20273
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering…
8.6
High