PT-2018-1190 · Cisco · Cisco Ios+1

Published 2018-03-28 · Updated 2025-10-28 · CVE-2018-0154

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Integrated Services Module for VPN (ISM-VPN) versions (affected versions not specified)

Description A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient handling of VPN traffic by the affected device. An attacker could exploit this vulnerability by sending crafted VPN traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to hang or crash, resulting in a DoS condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2018-00648

CVE-2018-0154

Affected Products

Cisco Ios

Cisco Integrated Services Module For Vpn

References · 11

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dos · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dos · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00648 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0154 · Security Note
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://t.me/cveNotify/140642 · Telegram Post
• https://t.me/cvenotify/108761 · Telegram Post
• http://securityfocus.com/bid/103559 · Note
• http://securitytracker.com/id/1040585 · Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0154 · Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Note