CVE-2018-0180
medium · 5.9Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-03-03Remediation due 2022-03-17
Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599.
5.9
CVSS
4.9%
EPSS (exploit prob.)
92nd
EPSS percentile
2018-03-28
Published
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-399
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | ios | 15.3(00.00.19)sy |
| cisco | ios | 15.4(01)ia001.100 |
| cisco | ios | 15.6(01.22)t |
| cisco | 3925_integrated_services_router | all versions |
| cisco | 3925e_integrated_services_router | all versions |
| cisco | 3945_integrated_services_router | all versions |
| cisco | 3945e_integrated_services_router | all versions |
| cisco | ios | 15.3(00.00.19)sy |
| cisco | ios | 15.4(03)m4.1 |
| cisco | 1000_integrated_services_router | all versions |
| cisco | 1100-4g/6g_integrated_services_router | all versions |
| cisco | 1100-4g_integrated_services_router | all versions |
| cisco | 1100-4gltegb_integrated_services_router | all versions |
| cisco | 1100-4gltena_integrated_services_router | all versions |
| cisco | 1100-4p_integrated_services_router | all versions |
| cisco | 1100-6g_integrated_services_router | all versions |
| cisco | 1100-8p_integrated_services_router | all versions |
| cisco | 1100-lte_integrated_services_router | all versions |
| cisco | 1100_integrated_services_router | all versions |
| cisco | 1101-4p_integrated_services_router | all versions |
| cisco | 1101_integrated_services_router | all versions |
| cisco | 1109-2p_integrated_services_router | all versions |
| cisco | 1109-4p_integrated_services_router | all versions |
| cisco | 1109_integrated_services_router | all versions |
| cisco | 1111x-8p_integrated_services_router | all versions |
| cisco | 1111x_integrated_services_router | all versions |
| cisco | 111x_integrated_services_router | all versions |
| cisco | 1120_integrated_services_router | all versions |
| cisco | 1131_integrated_services_router | all versions |
| cisco | 1160_integrated_services_router | all versions |
| cisco | 1801_integrated_service_router | all versions |
| cisco | 1802_integrated_service_router | all versions |
| cisco | 1803_integrated_service_router | all versions |
| cisco | 1811_integrated_service_router | all versions |
| cisco | 1812_integrated_service_router | all versions |
| cisco | 1841_integrated_service_router | all versions |
| cisco | 1861_integrated_service_router | all versions |
| cisco | 1905_integrated_services_router | all versions |
| cisco | 1906c_integrated_services_router | all versions |
| cisco | 1921_integrated_services_router | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://www.securityfocus.com/bid/103556
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin
- http://www.securityfocus.com/bid/103556
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0180
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2018-0180