Lucene search

K
cve[email protected]CVE-2018-0179
HistoryMar 28, 2018 - 10:29 p.m.

CVE-2018-0179

2018-03-2822:29:01
CWE-399
web.nvd.nist.gov
829
In Wild
cisco
ios
vulnerability
login enhancements
denial of service
nvd
cisco bug ids
remote attacker
reload

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%

Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599.

Affected configurations

NVD
Node
ciscoiosMatch15.3\(0.0.19\)sy
OR
ciscoiosMatch15.4\(1\)ia1.100
OR
ciscoiosMatch15.6\(1.22\)t
AND
cisco1921Match-
OR
cisco1941Match-
OR
cisco1941wMatch-
OR
cisco2901Match-
OR
cisco2911Match-
OR
cisco2921Match-
OR
cisco2951Match-
OR
cisco3925Match-
OR
cisco3925eMatch-
OR
cisco3945Match-
OR
cisco3945eMatch-
OR
cisco4451-xMatch-
Node
ciscoiosMatch15.3\(0.0.19\)sy
OR
ciscoiosMatch15.4\(3\)m4.1
Node
ciscoiosRange15.4\(2\)cg
OR
ciscoiosMatch15.4\(2\)t
OR
ciscoiosMatch15.4\(3\)m

CNA Affected

[
  {
    "product": "Cisco IOS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco IOS"
      }
    ]
  }
]

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.2%