CVE-2004-1111: Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other vers...

Security readout for executives and security teams

Older Cisco IOS releases can mishandle DHCP packets that cannot be delivered. Instead of dropping them, the device queues them until the input queue fills, causing legitimate traffic to be dropped. The business impact is network service disruption, not data theft. The bundle does not provide a CVSS score or evidence of active exploitation. Exposure is most likely on legacy Cisco IOS devices running the listed 12.2-based trains or similar affected versions, especially where DHCP service is enabled unnecessarily. Internet or untrusted-network adjacency increases concern, but the source bundle does not define exact reachable interfaces or device roles. Treat as a targeted legacy network availability risk. Prioritize if affected Cisco IOS devices still support critical routing, switching, or access paths. It is not presented as data compromise, but outage impact can be material for exposed or high-traffic network infrastructure. Mitigation focus: Review Cisco's advisory for fixed IOS releases and platform-specific guidance.; Disable DHCP service with "no service dhcp" where Cisco guidance and operations allow it.; Prioritize legacy edge, access, and transit devices exposed to untrusted networks..

Prepared

Jun 30, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.