CVE-2004-1111
Cisco IOS 2.2(18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW, and other versions without the "no service dhcp" command, keep undeliverable DHCP packets in the queue instead of dropping them, which allows remote attackers to cause a denial of service (dropped traffic) via multiple undeliverable DHCP packets that exceed the input queue size.
Key facts
- CVSS score
- 5.0 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:L/Au:N/C:N/I:N/A:P- EPSS score
- 2.3% (83th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2004-1109)
- Published
- January 10, 2005
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2004-1109 in the EU Vulnerability Database. Last updated in EUVD on August 8, 2024.
View on the EU Vulnerability DatabaseAffected products
- cisco / 7200 router
- cisco / 7300 router
- cisco / 7500 router
- cisco / 7600 router
- cisco / catalyst 7600
- cisco / ios
- cisco / ios
- cisco / ios
- cisco / ios
- cisco / ios
- cisco / ios
- cisco / ios
- cisco / ios
- cisco / multiservice platform 2650
- cisco / multiservice platform 2650xm
- cisco / multiservice platform 2651
- cisco / multiservice platform 2651xm
Certified products that may be affected
2 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Cisco Systems 2504, 7500, 8510 Wireless LAN Controllers and Cisco Catalyst 6807-XL Switch with Wireless Services Module-2 (WiSM2) - Cisco Systems, Inc. - FIPS 140 2497 - historical
- Cisco 7600 Series of Routers - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-10494-2012 - archived
References
- http://www.ciac.org/ciac/bulletins/p-034.shtml
- http://www.cisco.com/warp/public/707/cisco-sa-20041110-dhcp.shtml
- http://www.kb.cert.org/vuls/id/630104(Third Party Advisory, US Government Resource)
- http://www.us-cert.gov/cas/techalerts/TA04-316A.html(US Government Resource)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18021
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5632
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain