CVE-2023-20080

A vulnerability in the IPv6 DHCP version 6 (DHCPv6) relay and server features of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to insufficient validation of data boundaries. An attacker could exploit this vulnerability by sending crafted DHCPv6 messages to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly.

• CWE-129
• CWE-129

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-dhcpv6-dos-44cMvdDKVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-dhcpv6-dos-44cMvdDKVendor Advisory

Published

Mar 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20075Vulnerability in the CLI of Cisco Secure Email Gateway could…6.7
• CVE-2023-20076A vulnerability in the Cisco IOx application hosting environ…8.8
• CVE-2023-20077Multiple vulnerabilities in the web-based management interfa…6.5
• CVE-2023-20078Multiple vulnerabilities in the web-based management interfa…9.8
• CVE-2023-20079Multiple vulnerabilities in the web-based management interfa…7.5
• CVE-2023-2008A flaw was found in the Linux kernel's udmabuf device driver…8.2
• CVE-2023-20081A vulnerability in the IPv6 DHCP (DHCPv6) client module of C…5.9
• CVE-2023-20082A vulnerability in Cisco IOS XE Software for Cisco Catalyst …6.8
• CVE-2023-20083A vulnerability in ICMPv6 inspection when configured with th…8.6
• CVE-2023-20084A vulnerability in the endpoint software of Cisco Secure End…4.4
• CVE-2023-20085A vulnerability in the web-based management interface of Cis…6.1
• CVE-2023-20086A vulnerability in ICMPv6 processing of Cisco Adaptive Secur…8.6