PT-2018-8656 · Cisco · Cisco Ios

Published 2018-03-28 · Updated 2025-10-28 · CVE-2018-0180

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software versions 15.4(2)T through 15.4(3)M and 15.4(2)CG and later

Description: Multiple vulnerabilities in the Login Enhancements (Login Block) feature could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.

Recommendations: For versions 15.4(2)T and later, consider disabling the Login Enhancements (Login Block) feature until a patch is available. For versions 15.4(3)M and later, restrict access to the affected system to minimize the risk of exploitation. For version 15.4(2)CG and later, avoid using the Login Block feature in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2018-0180

Affected Products

Cisco Ios

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2018-0180 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0180 · Vendor Advisory
• https://t.me/cveNotify/140653 · Telegram Post
• http://securityfocus.com/bid/103556 · Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0180 · Note
• https://t.me/cvenotify/87231 · Telegram Post
• https://t.me/cvenotify/108782 · Telegram Post