CVE-2018-0172

🗓️ 28 Mar 2018 22:00:00Reported by ciscoType

A vulnerability in DHCP option 82 encapsulation of Cisco IOS and Cisco IOS XE Software could lead to unauthenticated remote attackers causing device reload and denial of service (DoS) condition

Reporter	Title	Published	Views	Family All 21
Tenable Nessus	Rockwell Automation Stratix Ethernet Switches < 15.3 IOS DHCP Reload	8 May 201900:00	–	nessus
Tenable Nessus	Cisco IOS DHCP Multiple Vulnerabilities	17 Apr 201800:00	–	nessus
Tenable Nessus	Cisco IOS DHCP Multiple Vulnerabilities	17 Apr 201800:00	–	nessus
Tenable Nessus	Cisco Ios Improper Restriction of Operations within the Bounds of a Memory Buffer	8 Nov 201900:00	–	nessus
Tenable Nessus	Rockwell Automation Stratix Industrial Managed Ethernet Switch 7Pk Errors (CVE-2018-0155)	15 Nov 202300:00	–	nessus
Tenable Nessus	Rockwell Automation Stratix Industrial Managed Ethernet Switch Improper Input Validation (CVE-2018-0172)	15 Nov 202300:00	–	nessus
ATTACKERKB	CVE-2018-0172	28 Mar 201800:00	–	attackerkb
BDU FSTEC	The vulnerability affects Cisco IOS and Cisco IOS XE operating systems via DHCP options. It allows a malicious actor to trigger a device reboot or cause a service failure.	2 Aug 202200:00	–	bdu_fstec
Circl	CVE-2018-0172	14 Jun 202321:10	–	circl
CISA KEV Catalog	Cisco IOS and IOS XE Software Improper Input Validation Vulnerability	3 Mar 202200:00	–	cisa_kev

[
  {
    "product": "Cisco IOS and IOS XE",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco IOS and IOS XE"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1040591
tenable	www.tenable.com/security/research/tra-2018-06
securityfocus	www.securityfocus.com/bid/103552
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-107-05
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-107-04
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr1

19 Apr 2018 13:57Current

9.1High risk

Vulners AI Score9.1

EPSS0.07824

CWE-20

vulnerability dhcp option 82 encapsulation cisco ios xe software unauthenticated remote attacker device reload denial of service dos condition input validation dhcpv4 heap overflow cisco bug ids cscvg62730