Known Exploited Vulnerabilities · CISA KEV Catalog

CVE-2018-0179: Cisco IOS Software Denial-of-Service Vulnerability

Summary: CISA's catalog lists CVE-2018-0179, a vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software that could let an unauthenticated, remote attacker trigger a reload of an affected system, causing a denial-of-service condition. The entry names Cisco IOS Software as the affected product and sets a remediation due date of 2022-03-17, with known ransomware campaign use listed as unknown.

What you should know: An unauthenticated, remote attacker can force a reload of a Cisco IOS device through its login-blocking feature, so the exposure is a network device that can be knocked offline without any credentials.

Read the original at CISA KEV Catalog ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2018-0179Cisco
Related