6.8
Medium
CVE-2018-0180 Cisco IOS Software Denial-of-Service Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Not observed so far
Weakness
CWE-399
Description
Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IOS | Versions not published |
Other CVEs of Cisco IOS
The 15 CVEs of Cisco IOS →
CVE-2018-0179
Cisco IOS Software Denial-of-Service Vulnerability
6.8
Medium
CVE-2018-0161
Cisco IOS Software Resource Management Errors Vulnerability
6.3
Medium
CVE-2018-0163
A vulnerability in the 802.1x multiple-authentication (multi-auth) feature of Cisco IOS Software could allow an…
Not rated
CVE-2018-0154
Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
7.5
High