CVE-2018-0174

Опубликовано: 28 мар. 2018

Источник: nvd

CVSS3: 8.6

CVSS2: 7.8

EPSS Низкий

Описание

A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software performs incomplete input validation of option 82 information that it receives in DHCP Version 4 (DHCPv4) packets from DHCP relay agents. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuh91645.

Ссылки

http://www.securityfocus.com/bid/103554
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040591
Broken Link
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04
Third Party Advisory
US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
Third Party Advisory
US Government Resource
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3
Vendor Advisory
https://www.tenable.com/security/research/tra-2018-06
Third Party Advisory
http://www.securityfocus.com/bid/103554
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040591
Broken Link
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04
Third Party Advisory
US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
Third Party Advisory
US Government Resource
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3
Vendor Advisory
https://www.tenable.com/security/research/tra-2018-06
Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0174
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:cisco:ios:12.2\(33\)sre7a:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xe:12.2\(33\)sre7a:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:cisco:7600_series_route_switch_processor_720:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:7600_series_supervisor_engine_32:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:7600_series_supervisor_engine_720:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*

Версия до 15.2\(4a\)ea5 (включая)

cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*

Версия до 15.2\(4a\)ea5 (включая)

cpe:2.3:h:rockwellautomation:allen-bradley_stratix_8300:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

Одно из

cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*

Версия до 15.2\(6\)e0a (включая)

cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*

Версия до 15.2\(6\)e0a (включая)

Одно из

cpe:2.3:h:rockwellautomation:allen-bradley_armorstratix_5700:-:*:*:*:*:*:*:*

cpe:2.3:h:rockwellautomation:allen-bradley_stratix_5400:-:*:*:*:*:*:*:*

cpe:2.3:h:rockwellautomation:allen-bradley_stratix_5410:-:*:*:*:*:*:*:*

cpe:2.3:h:rockwellautomation:allen-bradley_stratix_5700:-:*:*:*:*:*:*:*

cpe:2.3:h:rockwellautomation:allen-bradley_stratix_8000:-:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04069

Низкий

8.6 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-qcqh-fmx4-f33r

CVSS3: 8.6

github

больше 3 лет назад

BDU:2022-04738

CVSS3: 8.6

fstec

почти 8 лет назад

Уязвимость опции протокола DHCP (DHCP option 82) операционных систем Cisco IOS и Cisco IOS XE, позволяющая нарушителю вызвать перезагрузку устройства или вызвать отказ в обслуживании

EPSS

Процентиль: 88%

0.04069

Низкий

8.6 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-20