Cisco · IOS Software
CVE-2018-0154
Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
Cos'è
A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient handling of VPN traffic by the affected device. An attacker could exploit this vulnerability by sending crafted VPN traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to hang or crash, resulting in a DoS condition. Cisco Bug IDs: CSCvd39267.
CISA: A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition.
Cosa fare
Apply updates per vendor instructions.
Scadenza per le agenzie federali USA: 17 marzo 2022
Altre falle sfruttate di Cisco
| Aggiunto | Vulnerabilità | Prodotto | Gravità | Probabilità di attacco |
|---|---|---|---|---|
| 3 mar 2022 | SNMP Remote Code Execution | IOS software | Alta 8,8 | 7,3% |
| 3 mar 2022 | Resource Management Errors | IOS Software | Media 6,3 | 4,1% |
| 3 mar 2022 | Denial-of-Service | IOS Software | Media 6,8 | 4,9% |
| 3 mar 2022 | Denial-of-Service | IOS Software | Media 6,8 | 4,9% |
| 3 mar 2022 | Network Address Translation Denial-of-Service | IOS software | Alta 7,5 | 7,1% |
| 3 mar 2022 | for Cisco Integrated Services Routers Denial-of-Service | IOS software | Media 6,5 | 2,2% |
| 3 mar 2022 | Common Industrial Protocol Request Denial-of-Service | IOS software | Alta 7,5 | 7,1% |
| 3 mar 2022 | Common Industrial Protocol Request Denial-of-Service | IOS software | Alta 7,5 | 7,1% |
Fonti: Known Exploited Vulnerabilities (CISA, pubblico dominio), CVE records (cve.org) e EPSS (FIRST). La probabilità di attacco è la stima EPSS che qualcuno provi a sfruttare la falla nei prossimi 30 giorni.