CVE-2018-0094
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization on the targeted device. The vulnerability is due to insufficient rate limiting protection for IPv6 ingress traffic. An attacker could exploit this vulnerability by sending the affected device a high rate of IPv6 packets. Successful exploitation could allow the attacker to cause a DoS condition due to CPU and resource constraints. Cisco Bug IDs: CSCuv34544.
Una vulnerabilidad en el procesamiento de paquetes de ingreso IPv6 para Cisco UCS Central Software podría permitir que un atacante remoto no autenticado provoque una denegación de servicio (DoS) debido a un uso elevado de recursos de CPU en el dispositivo objetivo. Esta vulnerabilidad se debe a una protección de límite de tasa insuficiente para tráfico de ingreso IPv6. Un atacante podría explotar esta vulnerabilidad enviando una alta tasa de paquetes IPv6 al dispositivo afectado. Su explotación podría permitir a un atacante provocar una denegación de servicio debido a restricciones de recursos y CPU. Cisco Bug IDs: CSCuv34544.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-11-27 CVE Reserved
- 2018-01-18 CVE Published
- 2023-07-21 EPSS Updated
- 2024-08-05 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-400: Uncontrolled Resource Consumption
- CWE-693: Protection Mechanism Failure
CAPEC
References (3)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/102787 | Third Party Advisory | |
http://www.securitytracker.com/id/1040249 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-ucs | 2019-10-09 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Unified Computing System Central Software Search vendor "Cisco" for product "Unified Computing System Central Software" | 1.4\(1a\) Search vendor "Cisco" for product "Unified Computing System Central Software" and version "1.4\(1a\)" | - |
Affected
|