CVE-2018-0466: falha em Cisco IOS Software
Cisco IOS and IOS XE Software OSPFv3 Denial of Service Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.0%
A vulnerability in the Open Shortest Path First version 3 (OSPFv3) implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to incorrect handling of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending crafted OSPFv3 Link-State Advertisements (LSA) to an affected device. An exploit could allow the attacker to cause an affected device to reload, leading to a denial of service (DoS) condition.
Produtos afetados
Cisco · Cisco IOS SoftwareCVEs relacionadas — Cisco IOS Software
No mesmo produto, das mais perigosas para as menos.
CVE-2018-0485—Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service VulnerabilityEPSS 4.1%CVE-2018-0467—Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service VulnerabilityEPSS 3.8%CVE-2018-0473—Cisco IOS Software Precision Time Protocol Denial of Service VulnerabilityEPSS 3.5%CVE-2019-1751HIGHCisco IOS Software NAT64 Denial of Service VulnerabilityEPSS 2.5%CVE-2018-15369—Cisco IOS and IOS XE Software TACACS+ Client Denial of Service VulnerabilityEPSS 2.1%CVE-2018-15377—Cisco IOS and IOS XE Software Plug and Play Agent Memory Leak VulnerabilityEPSS 1.6%