PT-2018-8655 · Cisco · Cisco Ios Xe

Publicado 2018-03-28 · Atualizado 2021-10-18 · CVE-2018-0177

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software versions 16.1.1 and later

Description: A vulnerability in the IP Version 4 (IPv4) processing code could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IPv4 packets. An attacker could exploit this vulnerability by sending specific IPv4 packets to an IPv4 address on an affected device. A successful exploit could allow the attacker to cause high CPU utilization, traceback messages, or a reload of the affected device that leads to a DoS condition.

Recommendations: For Cisco IOS XE Software versions 16.1.1 and later, update to a fixed release to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

CVE-2018-0177

Produtos afetados

Cisco Ios Xe

Referências · 5

• https://osv.dev/vulnerability/CVE-2018-0177 · Aviso do Fabricante
• http://securitytracker.com/id/1040588 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0177 · Nota de Segurança
• http://securityfocus.com/bid/103563 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ipv4 · Aviso do Fabricante