BDU:2026-04161

Опубликовано: 25 мар. 2026

Источник: fstec

CVSS3: 8.6

CVSS2: 7.8

EPSS Низкий

Описание

Уязвимость функции отслеживания DHCP-сообщений операционной системы Cisco IOS XE коммутаторов серии Catalyst 9000 связана с неконтролируемым расходом ресурсов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код путем отправки специально сформированных BOOTP-пакетов

Вендор

Cisco Systems Inc.

Наименование ПО

Cisco IOS XE

Версия ПО

16.12.1 (Cisco IOS XE)

17.2.1 (Cisco IOS XE)

16.10.1 (Cisco IOS XE)

17.1.1 (Cisco IOS XE)

17.3.3 (Cisco IOS XE)

17.1.1s (Cisco IOS XE)

17.1.2 (Cisco IOS XE)

17.1.1t (Cisco IOS XE)

17.1.3 (Cisco IOS XE)

17.2.1a (Cisco IOS XE)

17.3.1 (Cisco IOS XE)

17.3.2 (Cisco IOS XE)

17.3.2a (Cisco IOS XE)

17.3.4 (Cisco IOS XE)

17.3.5 (Cisco IOS XE)

17.3.6 (Cisco IOS XE)

17.3.7 (Cisco IOS XE)

17.3.8 (Cisco IOS XE)

17.3.8a (Cisco IOS XE)

17.4.1 (Cisco IOS XE)

17.4.1c (Cisco IOS XE)

17.5.1 (Cisco IOS XE)

17.6.1 (Cisco IOS XE)

17.6.2 (Cisco IOS XE)

17.6.3 (Cisco IOS XE)

17.6.1y (Cisco IOS XE)

17.6.4 (Cisco IOS XE)

17.6.5 (Cisco IOS XE)

17.6.6 (Cisco IOS XE)

17.6.6a (Cisco IOS XE)

17.6.5a (Cisco IOS XE)

17.7.1 (Cisco IOS XE)

17.10.1 (Cisco IOS XE)

17.10.1b (Cisco IOS XE)

17.8.1 (Cisco IOS XE)

17.9.1 (Cisco IOS XE)

17.9.2 (Cisco IOS XE)

17.9.3 (Cisco IOS XE)

17.9.4 (Cisco IOS XE)

17.9.4a (Cisco IOS XE)

17.11.1 (Cisco IOS XE)

17.12.1 (Cisco IOS XE)

16.6.1 (Cisco IOS XE)

16.6.2 (Cisco IOS XE)

16.6.3 (Cisco IOS XE)

16.6.4 (Cisco IOS XE)

16.6.5 (Cisco IOS XE)

16.6.4s (Cisco IOS XE)

16.6.4a (Cisco IOS XE)

16.6.6 (Cisco IOS XE)

16.6.7 (Cisco IOS XE)

16.6.8 (Cisco IOS XE)

16.6.9 (Cisco IOS XE)

16.6.10 (Cisco IOS XE)

16.7.1 (Cisco IOS XE)

16.8.1 (Cisco IOS XE)

16.8.1a (Cisco IOS XE)

16.8.1s (Cisco IOS XE)

16.9.1 (Cisco IOS XE)

16.9.2 (Cisco IOS XE)

16.9.1s (Cisco IOS XE)

16.9.3 (Cisco IOS XE)

16.9.2s (Cisco IOS XE)

16.9.4 (Cisco IOS XE)

16.9.3s (Cisco IOS XE)

16.9.5 (Cisco IOS XE)

16.9.6 (Cisco IOS XE)

16.9.7 (Cisco IOS XE)

16.9.8 (Cisco IOS XE)

16.10.1s (Cisco IOS XE)

16.10.1e (Cisco IOS XE)

16.11.1 (Cisco IOS XE)

16.11.1b (Cisco IOS XE)

16.11.1s (Cisco IOS XE)

16.11.1c (Cisco IOS XE)

16.12.1s (Cisco IOS XE)

16.12.1c (Cisco IOS XE)

16.12.2 (Cisco IOS XE)

16.12.3 (Cisco IOS XE)

16.12.8 (Cisco IOS XE)

16.12.2s (Cisco IOS XE)

16.12.2t (Cisco IOS XE)

16.12.4 (Cisco IOS XE)

16.12.3s (Cisco IOS XE)

16.12.3a (Cisco IOS XE)

16.12.4a (Cisco IOS XE)

16.12.5 (Cisco IOS XE)

16.12.6 (Cisco IOS XE)

16.12.5b (Cisco IOS XE)

16.12.6a (Cisco IOS XE)

16.12.7 (Cisco IOS XE)

17.5.1b (Cisco IOS XE)

17.5.1c (Cisco IOS XE)

17.6.7 (Cisco IOS XE)

17.6.8 (Cisco IOS XE)

17.9.5 (Cisco IOS XE)

17.9.6 (Cisco IOS XE)

17.9.6a (Cisco IOS XE)

17.9.6b (Cisco IOS XE)

17.9.7 (Cisco IOS XE)

17.9.8 (Cisco IOS XE)

17.12.2 (Cisco IOS XE)

17.12.3 (Cisco IOS XE)

17.12.4 (Cisco IOS XE)

17.12.5 (Cisco IOS XE)

17.12.1z5 (Cisco IOS XE)

17.13.1 (Cisco IOS XE)

17.14.1 (Cisco IOS XE)

17.15.1 (Cisco IOS XE)

17.15.2 (Cisco IOS XE)

17.15.3 (Cisco IOS XE)

17.15.2b (Cisco IOS XE)

17.15.4 (Cisco IOS XE)

17.15.4b (Cisco IOS XE)

17.15.4s1 (Cisco IOS XE)

17.15.4d (Cisco IOS XE)

17.16.1 (Cisco IOS XE)

17.17.1 (Cisco IOS XE)

17.18.1 (Cisco IOS XE)

Тип ПО

Операционная система

Операционные системы и аппаратные платформы

Cisco Systems Inc. Cisco IOS XE 16.12.1

Cisco Systems Inc. Cisco IOS XE 17.2.1

Cisco Systems Inc. Cisco IOS XE 16.10.1

Cisco Systems Inc. Cisco IOS XE 17.1.1

Cisco Systems Inc. Cisco IOS XE 17.3.3

Cisco Systems Inc. Cisco IOS XE 17.1.1s

Cisco Systems Inc. Cisco IOS XE 17.1.2

Cisco Systems Inc. Cisco IOS XE 17.1.1t

Cisco Systems Inc. Cisco IOS XE 17.1.3

Cisco Systems Inc. Cisco IOS XE 17.2.1a

Cisco Systems Inc. Cisco IOS XE 17.3.1

Cisco Systems Inc. Cisco IOS XE 17.3.2

Cisco Systems Inc. Cisco IOS XE 17.3.2a

Cisco Systems Inc. Cisco IOS XE 17.3.4

Cisco Systems Inc. Cisco IOS XE 17.3.5

Cisco Systems Inc. Cisco IOS XE 17.3.6

Cisco Systems Inc. Cisco IOS XE 17.3.7

Cisco Systems Inc. Cisco IOS XE 17.3.8

Cisco Systems Inc. Cisco IOS XE 17.3.8a

Cisco Systems Inc. Cisco IOS XE 17.4.1

Cisco Systems Inc. Cisco IOS XE 17.4.1c

Cisco Systems Inc. Cisco IOS XE 17.5.1

Cisco Systems Inc. Cisco IOS XE 17.6.1

Cisco Systems Inc. Cisco IOS XE 17.6.2

Cisco Systems Inc. Cisco IOS XE 17.6.3

Cisco Systems Inc. Cisco IOS XE 17.6.1y

Cisco Systems Inc. Cisco IOS XE 17.6.4

Cisco Systems Inc. Cisco IOS XE 17.6.5

Cisco Systems Inc. Cisco IOS XE 17.6.6

Cisco Systems Inc. Cisco IOS XE 17.6.6a

Cisco Systems Inc. Cisco IOS XE 17.6.5a

Cisco Systems Inc. Cisco IOS XE 17.7.1

Cisco Systems Inc. Cisco IOS XE 17.10.1

Cisco Systems Inc. Cisco IOS XE 17.10.1b

Cisco Systems Inc. Cisco IOS XE 17.8.1

Cisco Systems Inc. Cisco IOS XE 17.9.1

Cisco Systems Inc. Cisco IOS XE 17.9.2

Cisco Systems Inc. Cisco IOS XE 17.9.3

Cisco Systems Inc. Cisco IOS XE 17.9.4

Cisco Systems Inc. Cisco IOS XE 17.9.4a

Cisco Systems Inc. Cisco IOS XE 17.11.1

Cisco Systems Inc. Cisco IOS XE 17.12.1

Cisco Systems Inc. Cisco IOS XE 16.6.1

Cisco Systems Inc. Cisco IOS XE 16.6.2

Cisco Systems Inc. Cisco IOS XE 16.6.3

Cisco Systems Inc. Cisco IOS XE 16.6.4

Cisco Systems Inc. Cisco IOS XE 16.6.5

Cisco Systems Inc. Cisco IOS XE 16.6.4s

Cisco Systems Inc. Cisco IOS XE 16.6.4a

Cisco Systems Inc. Cisco IOS XE 16.6.6

Cisco Systems Inc. Cisco IOS XE 16.6.7

Cisco Systems Inc. Cisco IOS XE 16.6.8

Cisco Systems Inc. Cisco IOS XE 16.6.9

Cisco Systems Inc. Cisco IOS XE 16.6.10

Cisco Systems Inc. Cisco IOS XE 16.7.1

Cisco Systems Inc. Cisco IOS XE 16.8.1

Cisco Systems Inc. Cisco IOS XE 16.8.1a

Cisco Systems Inc. Cisco IOS XE 16.8.1s

Cisco Systems Inc. Cisco IOS XE 16.9.1

Cisco Systems Inc. Cisco IOS XE 16.9.2

Cisco Systems Inc. Cisco IOS XE 16.9.1s

Cisco Systems Inc. Cisco IOS XE 16.9.3

Cisco Systems Inc. Cisco IOS XE 16.9.2s

Cisco Systems Inc. Cisco IOS XE 16.9.4

Cisco Systems Inc. Cisco IOS XE 16.9.3s

Cisco Systems Inc. Cisco IOS XE 16.9.5

Cisco Systems Inc. Cisco IOS XE 16.9.6

Cisco Systems Inc. Cisco IOS XE 16.9.7

Cisco Systems Inc. Cisco IOS XE 16.9.8

Cisco Systems Inc. Cisco IOS XE 16.10.1s

Cisco Systems Inc. Cisco IOS XE 16.10.1e

Cisco Systems Inc. Cisco IOS XE 16.11.1

Cisco Systems Inc. Cisco IOS XE 16.11.1b

Cisco Systems Inc. Cisco IOS XE 16.11.1s

Cisco Systems Inc. Cisco IOS XE 16.11.1c

Cisco Systems Inc. Cisco IOS XE 16.12.1s

Cisco Systems Inc. Cisco IOS XE 16.12.1c

Cisco Systems Inc. Cisco IOS XE 16.12.2

Cisco Systems Inc. Cisco IOS XE 16.12.3

Cisco Systems Inc. Cisco IOS XE 16.12.8

Cisco Systems Inc. Cisco IOS XE 16.12.2s

Cisco Systems Inc. Cisco IOS XE 16.12.2t

Cisco Systems Inc. Cisco IOS XE 16.12.4

Cisco Systems Inc. Cisco IOS XE 16.12.3s

Cisco Systems Inc. Cisco IOS XE 16.12.3a

Cisco Systems Inc. Cisco IOS XE 16.12.4a

Cisco Systems Inc. Cisco IOS XE 16.12.5

Cisco Systems Inc. Cisco IOS XE 16.12.6

Cisco Systems Inc. Cisco IOS XE 16.12.5b

Cisco Systems Inc. Cisco IOS XE 16.12.6a

Cisco Systems Inc. Cisco IOS XE 16.12.7

Cisco Systems Inc. Cisco IOS XE 17.5.1b

Cisco Systems Inc. Cisco IOS XE 17.5.1c

Cisco Systems Inc. Cisco IOS XE 17.6.7

Cisco Systems Inc. Cisco IOS XE 17.6.8

Cisco Systems Inc. Cisco IOS XE 17.9.5

Cisco Systems Inc. Cisco IOS XE 17.9.6

Cisco Systems Inc. Cisco IOS XE 17.9.6a

Cisco Systems Inc. Cisco IOS XE 17.9.6b

Cisco Systems Inc. Cisco IOS XE 17.9.7

Cisco Systems Inc. Cisco IOS XE 17.9.8

Cisco Systems Inc. Cisco IOS XE 17.12.2

Cisco Systems Inc. Cisco IOS XE 17.12.3

Cisco Systems Inc. Cisco IOS XE 17.12.4

Cisco Systems Inc. Cisco IOS XE 17.12.5

Cisco Systems Inc. Cisco IOS XE 17.12.1z5

Cisco Systems Inc. Cisco IOS XE 17.13.1

Cisco Systems Inc. Cisco IOS XE 17.14.1

Cisco Systems Inc. Cisco IOS XE 17.15.1

Cisco Systems Inc. Cisco IOS XE 17.15.2

Cisco Systems Inc. Cisco IOS XE 17.15.3

Cisco Systems Inc. Cisco IOS XE 17.15.2b

Cisco Systems Inc. Cisco IOS XE 17.15.4

Cisco Systems Inc. Cisco IOS XE 17.15.4b

Cisco Systems Inc. Cisco IOS XE 17.15.4s1

Cisco Systems Inc. Cisco IOS XE 17.15.4d

Cisco Systems Inc. Cisco IOS XE 17.16.1

Cisco Systems Inc. Cisco IOS XE 17.17.1

Cisco Systems Inc. Cisco IOS XE 17.18.1

Уровень опасности уязвимости

Высокий уровень опасности (базовая оценка CVSS 2.0 составляет 7,8)

Высокий уровень опасности (базовая оценка CVSS 3.1 составляет 8,6)

Возможные меры по устранению уязвимости

Установка обновлений из доверенных источников. В связи со сложившейся обстановкой и введенными санкциями против Российской Федерации рекомендуется устанавливать обновления программного обеспечения только после оценки всех сопутствующих рисков.

Компенсирующие меры:

- настройка агента ретрансляции DHCP на игнорирование BOOTP-пакетов путем выполнения следующей команды: ip dhcp relay bootp ignore;

- использование средств межсетевого экранирования для ограничения возможности удалённого доступа к программному обеспечению;

- ограничение доступа к программному обеспечению, используя схему доступа по «белым спискам»;

- использование SIEM-систем для отслеживания событий, связанных с обработкой BOOTP-пакетов;

- ограничение доступа из внешних сетей (Интернет).

Использование рекомендаций:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bootp-WuBhNBxA

Статус уязвимости

Подтверждена производителем

Наличие эксплойта

Данные уточняются

Информация об устранении

Уязвимость устранена

Ссылки на источники

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bootp-WuBhNBxA

Идентификаторы других систем описаний уязвимостей

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2026-20084
CVE

EPSS

Процентиль: 28%

0.00354

Низкий

8.6 High

CVSS3

7.8 High

CVSS2

Связанные уязвимости

CVE-2026-20084

CVSS3: 8.6

nvd

5 месяцев назад

A vulnerability in the DHCP snooping feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause BOOTP packets to be forwarded between VLANs, resulting in a denial of service (DoS) condition. This vulnerability is due to improper handling of BOOTP packets on Cisco Catalyst 9000 Series Switches. An attacker could exploit this vulnerability by sending BOOTP request packets to an affected device. A successful exploit could allow an attacker to forward BOOTP packets from one VLAN to another, resulting in BOOTP VLAN leakage and potentially leading to high CPU utilization. This makes the device unreachable (either through console or remote management) and unable to forward traffic, resulting in a DoS condition. Note: This vulnerability can be exploited with either unicast or broadcast BOOTP packets. There are workarounds that address this vulnerability.

GHSA-m8vf-g949-jwr2

CVSS3: 8.6

github

5 месяцев назад

EPSS

Процентиль: 28%

0.00354

Низкий

8.6 High

CVSS3

7.8 High

CVSS2