PT-2018-8716 · Cisco · Cisco Staros

Published 2018-04-19 · Updated 2019-10-09 · CVE-2018-0273

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet Core (VPC) System Software (affected versions not specified)

Description: A vulnerability in the IPsec Manager could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from being established, resulting in a denial of service (DoS) condition. This is due to improper processing of corrupted Internet Key Exchange Version 2 (IKEv2) messages. An attacker could exploit this by sending crafted IKEv2 messages toward an affected router, causing the ipsecmgr service to reload, which in turn terminates all IPsec VPN tunnels and prevents new ones from being established until the service restarts.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2018-0273

Affected Products

Cisco Staros

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-0273 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0273 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-starosasr · Vendor Advisory
• http://securityfocus.com/bid/103935 · Note
• http://securitytracker.com/id/1040721 · Note