CVE-2018-0174
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
Severity Score
8.6
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
Yes
*KEV
Decision
Act
*SSVC
Descriptions
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because the affected software performs incomplete input validation of option 82 information that it receives in DHCP Version 4 (DHCPv4) packets from DHCP relay agents. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuh91645.
Una vulnerabilidad en la funcionalidad de encapsulamiento de la opción 82 de DHCP en Cisco IOS Software y Cisco IOS XE Software podría permitir que un atacante remoto sin autenticar haga que el dispositivo afectado se reinicie, provocando una denegación de servicio (DoS) en consecuencia. La vulnerabilidad existe debido a que el software afectado realiza validación incompleta de entradas de la información de la opción 82 que recibe en los paquetes DHCPv4 (DHCP Version 4) de los agentes de reproducción DHCP. Un atacante podría explotar esta vulnerabilidad enviando un paquete DHCPv4 manipulado a un dispositivo afectado. Si se explota con éxito, podría permitir que el atacante consiga que el dispositivo afectado se reinicie, provocando una denegación de servicio. Cisco Bug IDs: CSCuh91645.
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Act
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-11-27 CVE Reserved
- 2018-03-28 CVE Published
- 2022-03-03 Exploited in Wild
- 2022-03-17 KEV Due Date
- 2024-09-21 EPSS Updated
- 2024-11-13 CVE Updated
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/103554 | Broken Link | |
| http://www.securitytracker.com/id/1040591 | Broken Link | |
| https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04 | Third Party Advisory | |
| https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05 | Third Party Advisory | |
| https://www.tenable.com/security/research/tra-2018-06 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3 | 2024-07-24 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 12.2\(33\)sre7a Search vendor "Cisco" for product "Ios" and version "12.2\(33\)sre7a" | - |
Affected
| in | Cisco Search vendor "Cisco" | 7600 Series Route Switch Processor 720 Search vendor "Cisco" for product "7600 Series Route Switch Processor 720" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 12.2\(33\)sre7a Search vendor "Cisco" for product "Ios" and version "12.2\(33\)sre7a" | - |
Affected
| in | Cisco Search vendor "Cisco" | 7600 Series Supervisor Engine 32 Search vendor "Cisco" for product "7600 Series Supervisor Engine 32" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 12.2\(33\)sre7a Search vendor "Cisco" for product "Ios" and version "12.2\(33\)sre7a" | - |
Affected
| in | Cisco Search vendor "Cisco" | 7600 Series Supervisor Engine 720 Search vendor "Cisco" for product "7600 Series Supervisor Engine 720" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 12.2\(33\)sre7a Search vendor "Cisco" for product "Ios Xe" and version "12.2\(33\)sre7a" | - |
Affected
| in | Cisco Search vendor "Cisco" | 7600 Series Route Switch Processor 720 Search vendor "Cisco" for product "7600 Series Route Switch Processor 720" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 12.2\(33\)sre7a Search vendor "Cisco" for product "Ios Xe" and version "12.2\(33\)sre7a" | - |
Affected
| in | Cisco Search vendor "Cisco" | 7600 Series Supervisor Engine 32 Search vendor "Cisco" for product "7600 Series Supervisor Engine 32" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 12.2\(33\)sre7a Search vendor "Cisco" for product "Ios Xe" and version "12.2\(33\)sre7a" | - |
Affected
| in | Cisco Search vendor "Cisco" | 7600 Series Supervisor Engine 720 Search vendor "Cisco" for product "7600 Series Supervisor Engine 720" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | <= 15.2\(4a\)ea5 Search vendor "Cisco" for product "Ios" and version " <= 15.2\(4a\)ea5" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Allen-bradley Stratix 8300 Search vendor "Rockwellautomation" for product "Allen-bradley Stratix 8300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | <= 15.2\(4a\)ea5 Search vendor "Cisco" for product "Ios Xe" and version " <= 15.2\(4a\)ea5" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Allen-bradley Stratix 8300 Search vendor "Rockwellautomation" for product "Allen-bradley Stratix 8300" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | <= 15.2\(6\)e0a Search vendor "Cisco" for product "Ios" and version " <= 15.2\(6\)e0a" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Allen-bradley Armorstratix 5700 Search vendor "Rockwellautomation" for product "Allen-bradley Armorstratix 5700" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | <= 15.2\(6\)e0a Search vendor "Cisco" for product "Ios" and version " <= 15.2\(6\)e0a" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Allen-bradley Stratix 5400 Search vendor "Rockwellautomation" for product "Allen-bradley Stratix 5400" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | <= 15.2\(6\)e0a Search vendor "Cisco" for product "Ios" and version " <= 15.2\(6\)e0a" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Allen-bradley Stratix 5410 Search vendor "Rockwellautomation" for product "Allen-bradley Stratix 5410" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | <= 15.2\(6\)e0a Search vendor "Cisco" for product "Ios" and version " <= 15.2\(6\)e0a" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Allen-bradley Stratix 5700 Search vendor "Rockwellautomation" for product "Allen-bradley Stratix 5700" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | <= 15.2\(6\)e0a Search vendor "Cisco" for product "Ios" and version " <= 15.2\(6\)e0a" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Allen-bradley Stratix 8000 Search vendor "Rockwellautomation" for product "Allen-bradley Stratix 8000" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | <= 15.2\(6\)e0a Search vendor "Cisco" for product "Ios Xe" and version " <= 15.2\(6\)e0a" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Allen-bradley Armorstratix 5700 Search vendor "Rockwellautomation" for product "Allen-bradley Armorstratix 5700" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | <= 15.2\(6\)e0a Search vendor "Cisco" for product "Ios Xe" and version " <= 15.2\(6\)e0a" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Allen-bradley Stratix 5400 Search vendor "Rockwellautomation" for product "Allen-bradley Stratix 5400" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | <= 15.2\(6\)e0a Search vendor "Cisco" for product "Ios Xe" and version " <= 15.2\(6\)e0a" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Allen-bradley Stratix 5410 Search vendor "Rockwellautomation" for product "Allen-bradley Stratix 5410" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | <= 15.2\(6\)e0a Search vendor "Cisco" for product "Ios Xe" and version " <= 15.2\(6\)e0a" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Allen-bradley Stratix 5700 Search vendor "Rockwellautomation" for product "Allen-bradley Stratix 5700" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | <= 15.2\(6\)e0a Search vendor "Cisco" for product "Ios Xe" and version " <= 15.2\(6\)e0a" | - |
Affected
| in | Rockwellautomation Search vendor "Rockwellautomation" | Allen-bradley Stratix 8000 Search vendor "Rockwellautomation" for product "Allen-bradley Stratix 8000" | - | - |
Safe
|