PT-2018-8851 · Cisco · Cisco Isr4451-X+4

Published 2018-09-26 · Updated 2019-10-09 · CVE-2018-0485

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Second Generation Integrated Services Routers (ISR G2) (affected versions not specified) Cisco 4451-X Integrated Services Router (ISR4451-X) (affected versions not specified)

Description A vulnerability in the SM-1T3/E3 firmware could allow an unauthenticated, remote attacker to cause the ISR G2 Router or the SM-1T3/E3 module on the ISR4451-X to reload, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of user input. An attacker could exploit this vulnerability by first connecting to the SM-1T3/E3 module console and entering a string sequence.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-19

CWE-20

Related Identifiers

CVE-2018-0485

Affected Products

Cisco Isr G2

Cisco Isr4451-X

Cisco Ios

Cisco Ios Xe

Sm-1T3/E3

References · 6

• https://osv.dev/vulnerability/CVE-2018-0485 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-sm1t3e3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0485 · Security Note
• http://securityfocus.com/bid/105433 · Note
• http://securitytracker.com/id/1041736 · Note
• http://securitytracker.com/id/1041737 · Note