PT-2018-2012 · Cisco · Cisco Ios Xe+1

Publicado 2018-09-26 · Atualizado 2019-10-09 · CVE-2018-0475

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE Software (affected versions not specified)

Description The issue is due to improper input validation when handling Cluster Management Protocol (CMP) messages, which could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition on an affected device. An attacker could exploit this by sending a malicious CMP message to an affected device, potentially causing the switch to crash and reload or to hang, resulting in a DoS condition. If the switch hangs, it will not reboot automatically and will need to be power cycled manually to recover.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2018-01628

CVE-2018-0475

Produtos afetados

Cisco Ios

Cisco Ios Xe

Referências · 8

• https://osv.dev/vulnerability/CVE-2018-0475 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2018-01628 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2018-0475 · Nota de Segurança
• https://nist.nvd.gob/vuln/detail/CVE-2018-0475 · Nota
• http://securityfocus.com/bid/105404 · Nota
• http://securitytracker.com/id/1041737 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-cmp · Aviso do Fabricante
• https://securityfocus.com/bid/105404/info · Nota