The vulnerability of Cisco IOS XE and Cisco IOS network devices from the Cisco Catalyst 4500 series and Cisco Catalyst 4500-X series lies in their lack of exception handling capabilities. This allows attackers to trigger a system reboot, cause an unexpected termination of an application, or induce a service failure.

🗓️ 20 Jul 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

Exception handling flaws in Cisco IOS and IOS XE on Catalyst 4500/4500-X allow reboot or service failure via crafted BFD messages.

Reporter	Title	Published	Views	Family All 21
Tenable Nessus	Rockwell Automation Stratix 8300 Ethernet Switches < 15.3 IOS Improper Input Validation and Resource Management Errors (ICSA-18-107-05)	24 Sep 201900:00	–	nessus
Tenable Nessus	Cisco IOS Software Bidirectional Forwarding Detection DoS (cisco-sa-20180328-bfd)	7 Jan 202000:00	–	nessus
Tenable Nessus	Cisco IOS and IOS XE Software Denial of Service Vulnerability (cisco-sa-20180328-bfd)	23 Apr 202000:00	–	nessus
Tenable Nessus	Cisco Ios Unspecified Vulnerability	8 Nov 201900:00	–	nessus
Tenable Nessus	Rockwell Automation Stratix Industrial Managed Ethernet Switch 7Pk Errors (CVE-2018-0155)	15 Nov 202300:00	–	nessus
Tenable Nessus	Rockwell Automation Stratix Industrial Managed Ethernet Switch Improper Input Validation (CVE-2018-0172)	15 Nov 202300:00	–	nessus
Tenable Nessus	Rockwell Automation Stratix Industrial Managed Ethernet Switch Improper Input Validation (CVE-2018-0174)	15 Nov 202300:00	–	nessus
ATTACKERKB	CVE-2018-0155	28 Mar 201800:00	–	attackerkb
Circl	CVE-2018-0155	14 Jun 202321:10	–	circl
CISA KEV Catalog	Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability	3 Mar 202200:00	–	cisa_kev

Vulners

Node

cisco_systems cisco_ios_xeMatch3.3xo

OR

cisco_systems cisco_ios_xeMatch3.7e

OR

cisco_systems cisco_ios_xeMatch3.8e

OR

cisco_systems cisco_ios_xeMatch3.9e

OR

cisco_systems cisco_ios_xeMatch3.2sg

OR

cisco_systems cisco_ios_xeMatch3.3sg

OR

cisco_systems cisco_ios_xeMatch3.4sg

OR

cisco_systems cisco_ios_xeMatch3.5e

OR

cisco_systems cisco_ios_xeMatch3.6e

OR

cisco_systems cisco_ios_xeMatch3.10e

OR

cisco_systems cisco_iosMatch15.1sg

OR

cisco_systems cisco_iosMatch15.2e

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-bfd
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-0155
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

24 Sep 2024 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 27.8

CVSS 38.6

EPSS0.07747

catalyst 4500 catalyst 4500-x exception handling bidirectional forwarding detection reboot risk service failure