Junglewise Threat Intelligence

CVE-2018-0161: Cisco IOS Software Resource Management Errors Vulnerability

CVE-2018-0161 · Severity: critical · CVSS 6.3 · Exploited in the wild · Published 2022-03-03

Technologies: Cisco IOS, Cisco Ios Software, Cisco IOS XE. Vendors: Cisco.

Executive brief

A vulnerability in the SNMP subsystem of Cisco IOS Software on certain Catalyst switches allows an authenticated, remote attacker to cause a denial-of-service (DoS) condition. The issue occurs when processing an SNMP read request for the ciscoFlashMIB object ID (OID), which can trigger a SYS-3-CPUHOG and cause the device to restart.

Affected products

  • Cisco IOS 15.2(5)E
  • Cisco Catalyst 2960-L Series Switches
  • Cisco Catalyst Digital Building Series Switches 8P
  • Cisco Catalyst Digital Building Series Switches 8U

Timeline

  • 2018-03-28: advisory: Initial Cisco advisory published
  • 2022-03-03: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2022-03-03: disclosed

Related threats