CVEvulnerability
CVE-2018-0257
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-04-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.3 MEDIUM — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 3.3 LOW — AV:A/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-399
Description
A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent attacker to cause high CPU usage on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to the incorrect handling of certain DHCP packets. An attacker could exploit this vulnerability by sending certain DHCP packets to a specific segment of an affected device. A successful exploit could allow the attacker to increase CPU usage on the affected device and cause a DoS condition. Cisco Bug IDs: CSCvg73687.
Affected configurations
• cisco ios xe (>= 3.18 <= 3.18.4)
• cisco ios xe (>= 16.6 <= 16.6.3)
• cisco ios xe (> 16.7 <= 16.7.2)
• cisco ios xe 15.6\(2\)sp
• cisco ios xe 16.4
• cisco ios xe 16.5
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/103948 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040716 Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-cbr8 Vendor Advisory
- http://www.securityfocus.com/bid/103948 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040716 Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-cbr8 Vendor Advisory