PT-2018-8716 · Cisco · Cisco Staros

Publicado 2018-04-19 · Atualizado 2019-10-09 · CVE-2018-0273

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet Core (VPC) System Software (affected versions not specified)

Description: A vulnerability in the IPsec Manager could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from being established, resulting in a denial of service (DoS) condition. This is due to improper processing of corrupted Internet Key Exchange Version 2 (IKEv2) messages. An attacker could exploit this by sending crafted IKEv2 messages toward an affected router, causing the ipsecmgr service to reload, which in turn terminates all IPsec VPN tunnels and prevents new ones from being established until the service restarts.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2018-0273

Produtos afetados

Cisco Staros

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-0273 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-0273 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-starosasr · Aviso do Fabricante
• http://securityfocus.com/bid/103935 · Nota
• http://securitytracker.com/id/1040721 · Nota