PT-2018-8656 · Cisco · Cisco Ios

Publicado 2018-03-28 · Atualizado 2025-10-28 · CVE-2018-0180

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software versions 15.4(2)T through 15.4(3)M and 15.4(2)CG and later

Description: Multiple vulnerabilities in the Login Enhancements (Login Block) feature could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.

Recommendations: For versions 15.4(2)T and later, consider disabling the Login Enhancements (Login Block) feature until a patch is available. For versions 15.4(3)M and later, restrict access to the affected system to minimize the risk of exploitation. For version 15.4(2)CG and later, avoid using the Login Block feature in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2018-0180

Produtos afetados

Cisco Ios

Referências · 8

• https://t.me/cveNotify/140653 · Publicação no Telegram
• http://securityfocus.com/bid/103556 · Nota
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0180 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0180 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin · Aviso do Fabricante
• https://t.me/cvenotify/87231 · Publicação no Telegram
• https://t.me/cvenotify/108782 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2018-0180 · Aviso do Fabricante