Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-0177

A vulnerability in the IP Version 4 (IPv4) processing code of Cisco IOS XE Software running on Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches could allow an unauthenticated, remote attacker to cause high CPU utilization, traceback messages, or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IPv4 packets. An attacker could exploit this vulnerability by sending specific IPv4 packets to an IPv4 address on an affected device. A successful exploit could allow the attacker to cause high CPU utilization, traceback messages, or a reload of the affected device that leads to a DoS condition. If the switch does not reboot when under attack, it would require manual intervention to reload the device. This vulnerability affects Cisco Catalyst 3850 and Cisco Catalyst 3650 Series Switches that are running Cisco IOS XE Software Release 16.1.1 or later, until the first fixed release, and are configured with an IPv4 address. Cisco Bug IDs: CSCvd80714.

Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.5, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts and availability (service disruption) for affected systems. Impacting 117 products from cisco, from cisco, from cisco and 114 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2018, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.

Published

2018-03-28T22:29:01.407

Last Modified

2024-11-21T03:37:40.253

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

6.9

Weaknesses

Type: Secondary
CWE-19
Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	cisco	ios_xe	denali-16.3.1	Yes
Operating System	cisco	ios_xe	denali-16.3.3	Yes
Hardware	cisco	4321_integrated_services_router	-	No
Hardware	cisco	4331_integrated_services_router	-	No
Hardware	cisco	4351_integrated_services_router	-	No
Hardware	cisco	4431_integrated_services_router	-	No
Hardware	cisco	4451-x_integrated_services_router	-	No
Hardware	cisco	asr_1000_series_route_processor_\(rp2\)	-	No
Hardware	cisco	asr_1000_series_route_processor_\(rp3\)	-	No
Hardware	cisco	asr_1001-hx	-	No
Hardware	cisco	asr_1001-x	-	No
Hardware	cisco	asr_1002-hx	-	No
Hardware	cisco	asr_1002-x	-	No
Hardware	cisco	catalyst_3650-12x48fd-e	-	No
Hardware	cisco	catalyst_3650-12x48fd-l	-	No
Hardware	cisco	catalyst_3650-12x48fd-s	-	No
Hardware	cisco	catalyst_3650-12x48uq-e	-	No
Hardware	cisco	catalyst_3650-12x48uq-l	-	No
Hardware	cisco	catalyst_3650-12x48uq-s	-	No
Hardware	cisco	catalyst_3650-12x48ur-e	-	No
Hardware	cisco	catalyst_3650-12x48ur-l	-	No
Hardware	cisco	catalyst_3650-12x48ur-s	-	No
Hardware	cisco	catalyst_3650-12x48uz-e	-	No
Hardware	cisco	catalyst_3650-24pd-e	-	No
Hardware	cisco	catalyst_3650-24pd-l	-	No
Hardware	cisco	catalyst_3650-24pd-s	-	No
Hardware	cisco	catalyst_3650-24pdm-e	-	No
Hardware	cisco	catalyst_3650-24pdm-l	-	No
Hardware	cisco	catalyst_3650-24pdm-s	-	No
Hardware	cisco	catalyst_3650-24ps-e	-	No
Hardware	cisco	catalyst_3650-24ps-l	-	No
Hardware	cisco	catalyst_3650-24ps-s	-	No
Hardware	cisco	catalyst_3650-24td-e	-	No
Hardware	cisco	catalyst_3650-24td-l	-	No
Hardware	cisco	catalyst_3650-24td-s	-	No
Hardware	cisco	catalyst_3650-24ts-e	-	No
Hardware	cisco	catalyst_3650-24ts-l	-	No
Hardware	cisco	catalyst_3650-24ts-s	-	No
Hardware	cisco	catalyst_3650-48fd-e	-	No
Hardware	cisco	catalyst_3650-48fd-l	-	No
Hardware	cisco	catalyst_3650-48fd-s	-	No
Hardware	cisco	catalyst_3650-48fq-e	-	No
Hardware	cisco	catalyst_3650-48fq-l	-	No
Hardware	cisco	catalyst_3650-48fq-s	-	No
Hardware	cisco	catalyst_3650-48fqm-e	-	No
Hardware	cisco	catalyst_3650-48fqm-l	-	No
Hardware	cisco	catalyst_3650-48fqm-s	-	No
Hardware	cisco	catalyst_3650-48fs-e	-	No
Hardware	cisco	catalyst_3650-48fs-l	-	No
Hardware	cisco	catalyst_3650-48fs-s	-	No
Hardware	cisco	catalyst_3650-48pd-e	-	No
Hardware	cisco	catalyst_3650-48pd-l	-	No
Hardware	cisco	catalyst_3650-48pd-s	-	No
Hardware	cisco	catalyst_3650-48pq-e	-	No
Hardware	cisco	catalyst_3650-48pq-l	-	No
Hardware	cisco	catalyst_3650-48pq-s	-	No
Hardware	cisco	catalyst_3650-48ps-e	-	No
Hardware	cisco	catalyst_3650-48ps-l	-	No
Hardware	cisco	catalyst_3650-48ps-s	-	No
Hardware	cisco	catalyst_3650-48td-e	-	No
Hardware	cisco	catalyst_3650-48td-l	-	No
Hardware	cisco	catalyst_3650-48td-s	-	No
Hardware	cisco	catalyst_3650-48tq-e	-	No
Hardware	cisco	catalyst_3650-48tq-l	-	No
Hardware	cisco	catalyst_3650-48tq-s	-	No
Hardware	cisco	catalyst_3650-48ts-e	-	No
Hardware	cisco	catalyst_3650-48ts-l	-	No
Hardware	cisco	catalyst_3650-48ts-s	-	No
Hardware	cisco	catalyst_3650-8x24pd-e	-	No
Hardware	cisco	catalyst_3650-8x24pd-l	-	No
Hardware	cisco	catalyst_3650-8x24pd-s	-	No
Hardware	cisco	catalyst_3650-8x24uq-e	-	No
Hardware	cisco	catalyst_3650-8x24uq-l	-	No
Hardware	cisco	catalyst_3650-8x24uq-s	-	No
Hardware	cisco	catalyst_3850-12s-e	-	No
Hardware	cisco	catalyst_3850-12s-s	-	No
Hardware	cisco	catalyst_3850-12xs-e	-	No
Hardware	cisco	catalyst_3850-12xs-s	-	No
Hardware	cisco	catalyst_3850-16xs-e	-	No
Hardware	cisco	catalyst_3850-16xs-s	-	No
Hardware	cisco	catalyst_3850-24p-e	-	No
Hardware	cisco	catalyst_3850-24p-l	-	No
Hardware	cisco	catalyst_3850-24p-s	-	No
Hardware	cisco	catalyst_3850-24s-e	-	No
Hardware	cisco	catalyst_3850-24s-s	-	No
Hardware	cisco	catalyst_3850-24t-e	-	No
Hardware	cisco	catalyst_3850-24t-l	-	No
Hardware	cisco	catalyst_3850-24t-s	-	No
Hardware	cisco	catalyst_3850-24u-e	-	No
Hardware	cisco	catalyst_3850-24u-l	-	No
Hardware	cisco	catalyst_3850-24u-s	-	No
Hardware	cisco	catalyst_3850-24xs-e	-	No
Hardware	cisco	catalyst_3850-24xs-s	-	No
Hardware	cisco	catalyst_3850-24xu-e	-	No
Hardware	cisco	catalyst_3850-24xu-l	-	No
Hardware	cisco	catalyst_3850-24xu-s	-	No
Hardware	cisco	catalyst_3850-32xs-e	-	No
Hardware	cisco	catalyst_3850-32xs-s	-	No
Hardware	cisco	catalyst_3850-48f-e	-	No
Hardware	cisco	catalyst_3850-48f-l	-	No
Hardware	cisco	catalyst_3850-48f-s	-	No
Hardware	cisco	catalyst_3850-48p-e	-	No
Hardware	cisco	catalyst_3850-48p-l	-	No
Hardware	cisco	catalyst_3850-48p-s	-	No
Hardware	cisco	catalyst_3850-48t-e	-	No
Hardware	cisco	catalyst_3850-48t-l	-	No
Hardware	cisco	catalyst_3850-48t-s	-	No
Hardware	cisco	catalyst_3850-48u-e	-	No
Hardware	cisco	catalyst_3850-48u-l	-	No
Hardware	cisco	catalyst_3850-48u-s	-	No
Hardware	cisco	catalyst_3850-48xs-e	-	No
Hardware	cisco	catalyst_3850-48xs-f-e	-	No
Hardware	cisco	catalyst_3850-48xs-f-s	-	No
Hardware	cisco	catalyst_3850-48xs-s	-	No
Hardware	cisco	catalyst_c3850-12x48u-e	-	No
Hardware	cisco	catalyst_c3850-12x48u-l	-	No
Hardware	cisco	catalyst_c3850-12x48u-s	-	No
Hardware	cisco	cloud_services_router_1000v	-	No

References

http://www.securityfocus.com/bid/103563 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1040588 Third Party Advisory, VDB Entry ([email protected])
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ipv4 Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/103563 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1040588 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ipv4 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For cisco's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.