PT-2018-8650 · Cisco · Cbr-8 Converged Broadband Routers+3

Publicado 2018-03-28 · Atualizado 2019-10-09 · CVE-2018-0164

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software (affected versions not specified)

Description: A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an interface queue wedge. The issue is due to incorrect handling of crafted IPv6 packets. An attacker could exploit this by sending crafted IPv6 packets through the device, potentially causing an interface queue wedge. This issue affects the Cisco cBR-8 Converged Broadband Router, Cisco ASR 1000 Series Aggregation Services Routers, and Cisco Cloud Services Router 1000V Series when configured with IPv6.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2018-0164

Produtos afetados

Cisco Asr 1000 Series Aggregation Services Routers

Cisco Ios Xe

Cloud Services Router 1000V Series

Cbr-8 Converged Broadband Routers

Referências · 4

• http://securityfocus.com/bid/103553 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0164 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-0164 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-sisf · Aviso do Fabricante