CVE-2018-0154: Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability
Summary: CVE-2018-0154 is a vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software that could let an unauthenticated, remote attacker cause a denial-of-service condition. CISA lists Cisco IOS Software as the affected product and set a remediation due date of 2022-03-17, with known ransomware campaign use recorded as unknown.
Bottom line: An unauthenticated remote attacker can take down VPN service on affected Cisco IOS devices, and CISA's remediation deadline of 2022-03-17 has already passed - while the catalog records no confirmed ransomware use, that field is marked unknown, not ruled out.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2018-0154Cisco
- Related
- CVE-2026-20320: Cisco Broad Works Improper Restriction of XML External Entity Reference Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Known Exploited Vulnerabilities · Oct 29, 2026CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 14, 2026