Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-0161

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Object ID Denial of Service Vulnerability. The vulnerability is due to a condition that could occur when the affected software processes an SNMP read request that contains a request for the ciscoFlashMIB object ID (OID). An attacker could trigger this vulnerability by issuing an SNMP GET request for the ciscoFlashMIB OID on an affected device. A successful exploit could cause the affected device to restart due to a SYS-3-CPUHOG. This vulnerability affects the following Cisco devices if they are running a vulnerable release of Cisco IOS Software and are configured to use SNMP Version 2 (SNMPv2) or SNMP Version 3 (SNMPv3): Cisco Catalyst 2960-L Series Switches, Cisco Catalyst Digital Building Series Switches 8P, Cisco Catalyst Digital Building Series Switches 8U. Cisco Bug IDs: CSCvd89541.

Published

2018-03-28T22:29:00.703

Last Modified

2025-01-27T20:17:38.187

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

6.8

Impact Score

6.9

Weaknesses
  • Type: Secondary
    CWE-399
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios 15.2\(5\)e Yes
Hardware cisco catalyst_2960l-16ps-ll - No
Hardware cisco catalyst_2960l-16ts-ll - No
Hardware cisco catalyst_2960l-24pq-ll - No
Hardware cisco catalyst_2960l-24ps-ll - No
Hardware cisco catalyst_2960l-24tq-ll - No
Hardware cisco catalyst_2960l-24ts-ll - No
Hardware cisco catalyst_2960l-48pq-ll - No
Hardware cisco catalyst_2960l-48ps-ll - No
Hardware cisco catalyst_2960l-48tq-ll - No
Hardware cisco catalyst_2960l-48ts-ll - No
Hardware cisco catalyst_2960l-8ps-ll - No
Hardware cisco catalyst_2960l-8ts-ll - No
Hardware cisco catalyst_digital_building_series_switches-8p - No
Hardware cisco catalyst_digital_building_series_switches-8u - No
References