PT-2018-3714 · Cisco · Catalyst 4500E Supervisor Engine 8-E+8
Published
2018-03-28
·
Updated
2025-10-28
·
CVE-2018-0155
CVSS v3.1
8.6
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Cisco Catalyst 4500 Series Switches (affected versions not specified)
Cisco Catalyst 4500-X Series Switches (affected versions not specified)
Catalyst 4500 Supervisor Engine 6-E (K5)
Catalyst 4500 Supervisor Engine 6L-E (K10)
Catalyst 4500 Supervisor Engine 7-E (K10)
Catalyst 4500 Supervisor Engine 7L-E (K10)
Catalyst 4500E Supervisor Engine 8-E (K10)
Catalyst 4500E Supervisor Engine 8L-E (K10)
Catalyst 4500E Supervisor Engine 9-E (K10)
Catalyst 4500-X Series Switches (K10)
Catalyst 4900M Switch (K5)
Catalyst 4948E Ethernet Switch (K5)
Description
A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial of service (DoS) condition. The vulnerability is due to insufficient error handling when the BFD header in a BFD packet is incomplete. An attacker could exploit this vulnerability by sending a crafted BFD message to or across an affected switch. A successful exploit could allow the attacker to trigger a reload of the system.
Recommendations
For Catalyst 4500 Supervisor Engine 6-E (K5), update to a fixed software version.
For Catalyst 4500 Supervisor Engine 6L-E (K10), update to a fixed software version.
For Catalyst 4500 Supervisor Engine 7-E (K10), update to a fixed software version.
For Catalyst 4500 Supervisor Engine 7L-E (K10), update to a fixed software version.
For Catalyst 4500E Supervisor Engine 8-E (K10), update to a fixed software version.
For Catalyst 4500E Supervisor Engine 8L-E (K10), update to a fixed software version.
For Catalyst 4500E Supervisor Engine 9-E (K10), update to a fixed software version.
For Catalyst 4500-X Series Switches (K10), update to a fixed software version.
For Catalyst 4900M Switch (K5), update to a fixed software version.
For Catalyst 4948E Ethernet Switch (K5), update to a fixed software version.
As a temporary workaround, consider disabling the BFD offload implementation until a patch is available.
Restrict access to the affected switches to minimize the risk of exploitation.
Fix
DoS
Improper Handling of Exceptional Conditions
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Catalyst 4500 Series Switches
Catalyst 4500 Supervisor Engine 6-E
Catalyst 4500 Supervisor Engine 7-E
Catalyst 4500E Supervisor Engine 8-E
Catalyst 4500E Supervisor Engine 9-E
Catalyst 4900M Switch
Catalyst 4948E Ethernet Switch
Cisco Ios
Cisco Ios Xe