PT-2018-8648 · Cisco · Cisco Ios Xe

Published 2018-03-28 · Updated 2019-10-09 · CVE-2018-0160

Positive Technologies (AI Summary)

CVSS v2.0

6.3

Medium

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software (affected versions not specified)

Description: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The issue is due to improper management of memory resources, referred to as a double free. An attacker could exploit this by sending crafted SNMP packets to an affected device, potentially causing it to reload. To exploit this via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string, while for SNMP Version 3, the attacker must know the user credentials. This affects Cisco devices running a vulnerable release of Cisco IOS XE Software, configured to be queried over SNMP, and with Network Address Translation (NAT) enabled.

Recommendations: To address this vulnerability, apply the software updates released by Cisco that fix the issue. As a temporary workaround, consider restricting access to SNMP or disabling NAT on affected devices until a patch is applied. Avoid using SNMP Version 2c or earlier with default or easily guessable read-only community strings. For SNMP Version 3, ensure strong user credentials are used to prevent unauthorized access.

Fix

DoS

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2018-0160

Affected Products

Cisco Ios Xe

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-0160 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp-dos · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0160 · Vendor Advisory
• http://securitytracker.com/id/1040584 · Note
• http://securityfocus.com/bid/103575 · Note