PT-2018-2012 · Cisco · Cisco Ios Xe+1

Published 2018-09-26 · Updated 2019-10-09 · CVE-2018-0475

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE Software (affected versions not specified)

Description The issue is due to improper input validation when handling Cluster Management Protocol (CMP) messages, which could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition on an affected device. An attacker could exploit this by sending a malicious CMP message to an affected device, potentially causing the switch to crash and reload or to hang, resulting in a DoS condition. If the switch hangs, it will not reboot automatically and will need to be power cycled manually to recover.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2018-01628

CVE-2018-0475

Affected Products

Cisco Ios

Cisco Ios Xe

References · 8

• https://osv.dev/vulnerability/CVE-2018-0475 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01628 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0475 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-cmp · Vendor Advisory
• https://nist.nvd.gob/vuln/detail/CVE-2018-0475 · Note
• http://securityfocus.com/bid/105404 · Note
• http://securitytracker.com/id/1041737 · Note
• https://securityfocus.com/bid/105404/info · Note