CVE-2013-6692: Cisco IOS XE 3.8S(.2) and earlier does not properly use a DHCP pool during assignment of an IP address, whi...

Security readout for executives and security teams

This vulnerability can let an authenticated remote user crash and reload an affected Cisco IOS XE device. The business impact is service interruption, not confirmed data theft. Exposure depends on running Cisco IOS XE 3.8S(.2) or earlier and using AAA behavior that can require DHCP-based address assignment. Likely exposure is limited to Cisco IOS XE 3.8S(.2) and earlier systems where remote authenticated users can reach AAA workflows that require an assigned IP address from DHCP pool logic. Treat as a targeted availability risk. Prioritize affected network infrastructure that supports business-critical connectivity, remote access, or shared services, especially where many authenticated users can reach AAA functions. Mitigation focus: Identify Cisco IOS XE devices at version 3.8S(.2) or earlier.; Review Cisco advisory guidance for CSCuh04949 and CVE-2013-6692.; Limit AAA access to trusted users and management networks..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.