PT-2018-8655 · Cisco · Cisco Ios Xe

Published 2018-03-28 · Updated 2021-10-18 · CVE-2018-0177

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software versions 16.1.1 and later

Description: A vulnerability in the IP Version 4 (IPv4) processing code could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IPv4 packets. An attacker could exploit this vulnerability by sending specific IPv4 packets to an IPv4 address on an affected device. A successful exploit could allow the attacker to cause high CPU utilization, traceback messages, or a reload of the affected device that leads to a DoS condition.

Recommendations: For Cisco IOS XE Software versions 16.1.1 and later, update to a fixed release to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-19

Related Identifiers

CVE-2018-0177

Affected Products

Cisco Ios Xe

References · 5

• https://osv.dev/vulnerability/CVE-2018-0177 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0177 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ipv4 · Vendor Advisory
• http://securitytracker.com/id/1040588 · Note
• http://securityfocus.com/bid/103563 · Note