CVE-2004-1111: Cisco 7200 Router

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.

Affected products

• Cisco 7200 Router: any version
• Cisco 7300 Router: any version
• Cisco 7500 Router: any version
• Cisco 7600 Router: any version
• Cisco Catalyst 7600: any version
• Cisco IOS: version 12.2(14)sz only; version 12.2(18)ew only; version 12.2(18)ewa only; version 12.2(18)s only; version 12.2(18)se only; version 12.2(18)sv only; …
• Cisco Multiservice Platform 2650
• Cisco Multiservice Platform 2650xm
• Cisco Multiservice Platform 2651
• Cisco Multiservice Platform 2651xm

Published 2005-01-10. Last modified 2026-06-16.