CVE-2014-3271: The DHCPv6 implementation in Cisco IOS XR allows remote attackers to cause a denial of service (device cras...

Security readout for executives and security teams

CVE-2014-3271 is a Cisco IOS XR DHCPv6 denial-of-service flaw. A malformed DHCPv6 packet can crash an affected device. For executives, the main risk is network availability, especially where IOS XR routers process DHCPv6 traffic from untrusted networks. Exposure is most likely on Cisco IOS XR devices with DHCPv6 functionality enabled and reachable by untrusted or adjacent network traffic. The source bundle does not identify affected IOS XR versions or hardware platforms. Treat this as an availability risk for network infrastructure, not a data-theft issue based on provided evidence. Prioritize environments where IOS XR routers are critical path devices and DHCPv6 traffic can reach them from untrusted sources. Mitigation focus: Inventory Cisco IOS XR devices and confirm whether DHCPv6 is enabled or reachable.; Review the Cisco notice for affected releases, fixed software, and interim guidance.; Limit untrusted DHCPv6 traffic to router control-plane interfaces where operationally possible..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.