CVE-2015-0708: Cisco IOS

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by including an IA_NA option in a DHCPv6 Solicit message on the local network, aka Bug ID CSCur29956.

Affected products

• Cisco IOS: version 15.4(3)s only; version 15.4(3)s1 only; version 15.4(3)sn1 only; version 15.4s only; version 15.4sn only; version 15.5(1)s only; …
• Cisco IOS XE: version 3.13s.0 only; version 3.13s.1 only; version 3.14s.0 only

Published 2015-04-29. Last modified 2026-06-17.