Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-0158

A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device to be processed. A successful exploit could cause an affected device to continuously consume memory and eventually reload, resulting in a DoS condition. Cisco Bug IDs: CSCvf22394.

Published

2018-03-28T22:29:00.547

Last Modified

2025-01-27T20:16:35.513

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.6 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-401
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios 15.5\(3\)s1.1 Yes
Operating System cisco ios 15.5\(3\)s1.2 Yes
Operating System cisco ios 15.5\(3\)s1.4 Yes
Operating System cisco ios 15.5\(3\)s1.5 Yes
Operating System cisco ios 15.5\(3\)s1.7 Yes
Operating System cisco ios 15.5\(3\)s1.8 Yes
Operating System cisco ios 15.5\(3\)s1.9 Yes
Operating System cisco ios 15.5\(3\)s1.10 Yes
Operating System cisco ios 15.5\(3\)s1.11 Yes
Operating System cisco ios 15.5\(3\)s1.12 Yes
Hardware cisco asr_1001-hx - No
Hardware cisco asr_1001-x - No
Hardware cisco asr_1002-hx - No
Hardware cisco asr_1002-x - No
Hardware cisco asr_1004 - No
Hardware cisco asr_1006 - No
Hardware cisco asr_1006-x - No
Hardware cisco asr_1009-x - No
Hardware cisco asr_1013 - No
Operating System cisco ios_xe 15.5\(3\)s1.1 Yes
Operating System cisco ios_xe 15.5\(3\)s1.2 Yes
Operating System cisco ios_xe 15.5\(3\)s1.4 Yes
Operating System cisco ios_xe 15.5\(3\)s1.5 Yes
Operating System cisco ios_xe 15.5\(3\)s1.7 Yes
Operating System cisco ios_xe 15.5\(3\)s1.8 Yes
Operating System cisco ios_xe 15.5\(3\)s1.9 Yes
Operating System cisco ios_xe 15.5\(3\)s1.10 Yes
Operating System cisco ios_xe 15.5\(3\)s1.11 Yes
Operating System cisco ios_xe 15.5\(3\)s1.12 Yes
Hardware cisco asr_1001-hx - No
Hardware cisco asr_1001-x - No
Hardware cisco asr_1002-hx - No
Hardware cisco asr_1002-x - No
Hardware cisco asr_1004 - No
Hardware cisco asr_1006 - No
Hardware cisco asr_1006-x - No
Hardware cisco asr_1009-x - No
Hardware cisco asr_1013 - No
Operating System cisco ios 15.5\(3\)s1.1 Yes
Operating System cisco ios 15.5\(3\)s1.2 Yes
Operating System cisco ios 15.5\(3\)s1.4 Yes
Operating System cisco ios 15.5\(3\)s1.5 Yes
Operating System cisco ios 15.5\(3\)s1.7 Yes
Operating System cisco ios 15.5\(3\)s1.8 Yes
Operating System cisco ios 15.5\(3\)s1.9 Yes
Operating System cisco ios 15.5\(3\)s1.10 Yes
Operating System cisco ios 15.5\(3\)s1.11 Yes
Operating System cisco ios 15.5\(3\)s1.12 Yes
Operating System cisco ios_xe 15.5\(3\)s1.1 Yes
Operating System cisco ios_xe 15.5\(3\)s1.2 Yes
Operating System cisco ios_xe 15.5\(3\)s1.4 Yes
Operating System cisco ios_xe 15.5\(3\)s1.5 Yes
Operating System cisco ios_xe 15.5\(3\)s1.7 Yes
Operating System cisco ios_xe 15.5\(3\)s1.8 Yes
Operating System cisco ios_xe 15.5\(3\)s1.9 Yes
Operating System cisco ios_xe 15.5\(3\)s1.10 Yes
Operating System cisco ios_xe 15.5\(3\)s1.11 Yes
Operating System cisco ios_xe 15.5\(3\)s1.12 Yes
Hardware rockwellautomation allen-bradley_stratix_5900 - No
References