Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-0159

Опубликовано: 28 мар. 2018
Источник: nvd
CVSS3: 7.5
CVSS2: 7.8
EPSS Низкий

Описание

A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of specific IKEv1 packets. An attacker could exploit this vulnerability by sending crafted IKEv1 packets to an affected device during an IKE negotiation. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuj73916.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:cisco:ios:15.3\(3\)s:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:cisco:asr_901-12c-f-d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-12c-ft-d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-4c-f-d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-4c-ft-d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-6cz-f-a:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-6cz-f-d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-6cz-ft-a:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-6cz-ft-d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:me_3600x-24cx-m:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:me_3600x-24fs-m:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:me_3600x-24ts-m:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:me_3800x-24fs-m:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:cisco:ios_xe:15.3\(3\)s:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:cisco:asr_901-12c-f-d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-12c-ft-d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-4c-f-d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-4c-ft-d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-6cz-f-a:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-6cz-f-d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-6cz-ft-a:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:asr_901-6cz-ft-d:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:me_3600x-24cx-m:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:me_3600x-24fs-m:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:me_3600x-24ts-m:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:me_3800x-24fs-m:-:*:*:*:*:*:*:*

EPSS

Процентиль: 90%
0.05255
Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20
NVD-CWE-noinfo

Связанные уязвимости

github логотип

GHSA-p7j7-5cqq-j6m7

CVSS3: 7.5
github
больше 3 лет назад

A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of specific IKEv1 packets. An attacker could exploit this vulnerability by sending crafted IKEv1 packets to an affected device during an IKE negotiation. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuj73916.

fstec логотип

BDU:2018-00646

CVSS3: 7.5
fstec
почти 8 лет назад

Уязвимость реализации протокола Internet Key Exchange (IKEv1) операционных систем Cisco IOS и IOS XE, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 90%
0.05255
Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20
NVD-CWE-noinfo