PT-2018-1190 · Cisco · Cisco Ios+1

CVE-2018-0154 · Publicado 2018-03-28 · Atualizado 2025-10-28

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Integrated Services Module for VPN (ISM-VPN) versions (affected versions not specified)

Description A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient handling of VPN traffic by the affected device. An attacker could exploit this vulnerability by sending crafted VPN traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to hang or crash, resulting in a DoS condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2018-00648

CVE-2018-0154

Produtos afetados

Cisco Ios

Cisco Integrated Services Module For Vpn

Referências · 11

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dos · Aviso do Fabricante
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Nota
• https://t.me/cveNotify/140642 · Publicação no Telegram
• https://t.me/cvenotify/108761 · Publicação no Telegram
• http://securityfocus.com/bid/103559 · Nota
• http://securitytracker.com/id/1040585 · Nota
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dos · Aviso do Fabricante
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0154 · Nota
• https://bdu.fstec.ru/vul/2018-00648 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-0154 · Nota de Segurança
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Nota