Cisco · IOS Software
CVE-2018-0161
Cisco IOS Software Resource Management Errors Vulnerability
무엇인가
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Object ID Denial of Service Vulnerability. The vulnerability is due to a condition that could occur when the affected software processes an SNMP read request that contains a request for the ciscoFlashMIB object ID (OID). An attacker could trigger this vulnerability by issuing an SNMP GET request for the ciscoFlashMIB OID on an affected device. A successful exploit could cause the affected device to restart due to a SYS-3-CPUHOG. This vulnerability affects the following Cisco devices if they are running a vulnerable release of Cisco IOS Software and are configured to use SNMP Version 2 (SNMPv2) or SNMP Version 3 (SNMPv3): Cisco Catalyst 2960-L Series Switches, Cisco Catalyst Digital Building Series Switches 8P, Cisco Catalyst Digital Building Series Switches 8U. Cisco Bug IDs: CSCvd89541.
CISA: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition.
할 일
Apply updates per vendor instructions.
미국 연방 기관 조치 기한: 2022년 3월 17일
Cisco의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2022. 3. 3. | SNMP Remote Code Execution | IOS software | 높음 8.8 | 7.3% |
| 2022. 3. 3. | Integrated Services Module for VPN Denial-of-Service | IOS Software | 높음 7.5 | 7.1% |
| 2022. 3. 3. | Denial-of-Service | IOS Software | 보통 6.8 | 4.9% |
| 2022. 3. 3. | Denial-of-Service | IOS Software | 보통 6.8 | 4.9% |
| 2022. 3. 3. | Network Address Translation Denial-of-Service | IOS software | 높음 7.5 | 7.1% |
| 2022. 3. 3. | for Cisco Integrated Services Routers Denial-of-Service | IOS software | 보통 6.5 | 2.2% |
| 2022. 3. 3. | Common Industrial Protocol Request Denial-of-Service | IOS software | 높음 7.5 | 7.1% |
| 2022. 3. 3. | Common Industrial Protocol Request Denial-of-Service | IOS software | 높음 7.5 | 7.1% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.