Back to feed
EUVD-2018-0982 · Published Mar 28, 2018
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of specific IKEv1 packets. An attacker could exploit this vulnerability by sending crafted IKEv1 packets to an affected device during an IKE negotiation. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuj73916.
Technologies
Cisco Asr 901-6Cz-F-ACisco Asr 901-6Cz-Ft-DCisco Asr 901-4C-F-DCisco Asr 901-6Cz-Ft-ACisco Me 3600X-24Cx-MCisco Ios XeCisco Asr 901-4C-Ft-DCisco Me 3600X-24Ts-MCisco Asr 901-12C-F-DCisco Me 3600X-24Fs-MCisco IosCisco Asr 901-6Cz-F-DCisco Asr 901-12C-Ft-DCisco Me 3800X-24Fs-M
Weaknesses
CWE-20
CVSS scores
- v3.17.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - v2.07.8
AV:N/AC:L/Au:N/C:N/I:N/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
