CVE-2015-0598: The RADIUS implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (dev...

Security readout for executives and security teams

This vulnerability can make affected Cisco IOS or IOS XE devices reload when they process specially crafted RADIUS Access-Accept packets containing IPv6 attributes. A reload can interrupt routing, VPN, or network access services. The provided sources do not include CVSS, fixed versions, or confirmed exploitation. Exposure is most relevant to Cisco IOS or IOS XE devices that use RADIUS authentication and process Access-Accept responses containing IPv6 attributes. Exact affected releases are not listed in the supplied bundle. Treat this as an operational resilience issue for Cisco network infrastructure using RADIUS. Prioritize environments where a device reload would affect remote access, routing, or campus authentication. Urgency depends on affected-version confirmation from Cisco guidance. Mitigation focus: Review Cisco’s advisory for affected releases and fixed software guidance.; Prioritize remediation for core, edge, VPN, and network access devices using RADIUS.; Restrict RADIUS traffic to trusted authentication servers and expected network paths..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.