BLACKOUT MAP

Cisco · IOS Software

CVE-2018-0154

Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability

Exploited in attacks High 7.5 Attack chance: 7.1%
Share

What it is

A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient handling of VPN traffic by the affected device. An attacker could exploit this vulnerability by sending crafted VPN traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to hang or crash, resulting in a DoS condition. Cisco Bug IDs: CSCvd39267.

CISA: A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition.

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: March 17, 2022

Added to the CISA list
March 3, 2022
Published
March 28, 2018
Severity
High 7.5 CVSS 3.1
Chance of attacks in the next 30 days (EPSS)
7.1% in the top 5.8% of all known vulnerabilities
Weakness
CWE-399
More details
NVD · CVE.org · CISA
All references (3)

More exploited flaws from Cisco

AddedVulnerabilityProductSeverityAttack chance
Mar 3, 2022SNMP Remote Code ExecutionCVE-2017-6744IOS softwareHigh 8.87.3%
Mar 3, 2022Resource Management ErrorsCVE-2018-0161IOS SoftwareMedium 6.34.1%
Mar 3, 2022Denial-of-ServiceCVE-2018-0179IOS SoftwareMedium 6.84.9%
Mar 3, 2022Denial-of-ServiceCVE-2018-0180IOS SoftwareMedium 6.84.9%
Mar 3, 2022Network Address Translation Denial-of-ServiceCVE-2017-12231IOS softwareHigh 7.57.1%
Mar 3, 2022for Cisco Integrated Services Routers Denial-of-ServiceCVE-2017-12232IOS softwareMedium 6.52.2%
Mar 3, 2022Common Industrial Protocol Request Denial-of-ServiceCVE-2017-12233IOS softwareHigh 7.57.1%
Mar 3, 2022Common Industrial Protocol Request Denial-of-ServiceCVE-2017-12234IOS softwareHigh 7.57.1%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.