Known Exploited Vulnerabilities · CISA KEV Catalog

CVE-2018-0180: Cisco IOS Software Denial-of-Service Vulnerability

Summary: CVE-2018-0180 is a vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software that could let an unauthenticated, remote attacker trigger a reload of an affected system, causing a denial-of-service condition. CISA set a remediation due date of 2022-03-17 for the flaw, and known ransomware campaign use is listed as unknown.

Why it matters: An unauthenticated, remote attacker can force a reload of Cisco IOS devices through the Login Block feature, and CISA's catalog entry leaves ransomware use as unknown, so the exposure cannot be ruled out from this record alone.

Read the original at CISA KEV Catalog ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2018-0180Cisco
Related