CVE-2018-0159

A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of specific IKEv1 packets. An attacker could exploit this vulnerability by sending crafted IKEv1 packets to an affected device during an IKE negotiation. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuj73916.

CVSS v3 7.5 HIGH
CVSS v2.0 7.8 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/103562	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1040595	Broken Link Third Party Advisory VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike-dos	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:cisco:ios:15.3\(3\)s:*:*:*:*:*:*:*

OR	cpe:2.3:h:cisco:asr_901-12c-f-d:-:::::::*
	cpe:2.3:h:cisco:asr_901-12c-ft-d:-:::::::*
	cpe:2.3:h:cisco:asr_901-4c-f-d:-:::::::*
	cpe:2.3:h:cisco:asr_901-4c-ft-d:-:::::::*
	cpe:2.3:h:cisco:asr_901-6cz-f-a:-:::::::*
	cpe:2.3:h:cisco:asr_901-6cz-f-d:-:::::::*
	cpe:2.3:h:cisco:asr_901-6cz-ft-a:-:::::::*
	cpe:2.3:h:cisco:asr_901-6cz-ft-d:-:::::::*
	cpe:2.3:h:cisco:me_3600x-24cx-m:-:::::::*
	cpe:2.3:h:cisco:me_3600x-24fs-m:-:::::::*
	cpe:2.3:h:cisco:me_3600x-24ts-m:-:::::::*
	cpe:2.3:h:cisco:me_3800x-24fs-m:-:::::::*

Configuration 2 (hide)

AND

cpe:2.3:o:cisco:ios_xe:15.3\(3\)s:*:*:*:*:*:*:*

OR	cpe:2.3:h:cisco:asr_901-12c-f-d:-:::::::*
	cpe:2.3:h:cisco:asr_901-12c-ft-d:-:::::::*
	cpe:2.3:h:cisco:asr_901-4c-f-d:-:::::::*
	cpe:2.3:h:cisco:asr_901-4c-ft-d:-:::::::*
	cpe:2.3:h:cisco:asr_901-6cz-f-a:-:::::::*
	cpe:2.3:h:cisco:asr_901-6cz-f-d:-:::::::*
	cpe:2.3:h:cisco:asr_901-6cz-ft-a:-:::::::*
	cpe:2.3:h:cisco:asr_901-6cz-ft-d:-:::::::*
	cpe:2.3:h:cisco:me_3600x-24cx-m:-:::::::*
	cpe:2.3:h:cisco:me_3600x-24fs-m:-:::::::*
	cpe:2.3:h:cisco:me_3600x-24ts-m:-:::::::*
	cpe:2.3:h:cisco:me_3800x-24fs-m:-:::::::*

History

No history.

Information

Published : 2018-03-28 22:29

Updated : 2024-07-16 17:24

NVD link : CVE-2018-0159

Mitre link : CVE-2018-0159

CVE.ORG link : CVE-2018-0159

JSON object : View

Products Affected

cisco

asr_901-4c-ft-d
me_3600x-24fs-m
asr_901-6cz-f-d
asr_901-6cz-ft-a
asr_901-12c-f-d
asr_901-12c-ft-d
asr_901-6cz-ft-d
ios
me_3600x-24ts-m
me_3800x-24fs-m
asr_901-6cz-f-a
asr_901-4c-f-d
me_3600x-24cx-m
ios_xe

CWE

NVD-CWE-noinfo CWE-20

Improper Input Validation

{"id": "CVE-2018-0159", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2018-03-28T22:29:00.593", "references": [{"url": "http://www.securityfocus.com/bid/103562", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1040595", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike-dos", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of specific IKEv1 packets. An attacker could exploit this vulnerability by sending crafted IKEv1 packets to an affected device during an IKE negotiation. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuj73916."}, {"lang": "es", "value": "Una vulnerabilidad en la implementaci\u00f3n de la funcionalidad Internet Key Exchange Version 1 (IKEv1) de Cisco IOS Software y Cisco IOS XE Software podr\u00eda permitir que un atacante remoto no autenticado provoque el reinicio de un dispositivo afectado, lo que da como resultado una denegaci\u00f3n de servicio (DoS). Esta vulnerabilidad se debe a la validaci\u00f3n incorrecta de paquetes IKEv1 espec\u00edficos. Un atacante podr\u00eda explotar esta vulnerabilidad enviando paquetes IKEv1 manipulados al dispositivo afectado durante una negociaci\u00f3n IKE. Un exploit con \u00e9xito, podr\u00eda permitir que el atacante consiga que el dispositivo afectado se reinicie, lo que provoca una denegaci\u00f3n de servicio. Cisco Bug IDs: CSCuj73916."}], "lastModified": "2024-07-16T17:24:54.090", "cisaActionDue": "2022-03-17", "cisaExploitAdd": "2022-03-03", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios:15.3\\(3\\)s:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB84CE04-F2D0-4A37-B2BA-25126D1824D8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:asr_901-12c-f-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D6279A69-2F9D-4CD9-9C19-62E701C3C4F9"}, {"criteria": "cpe:2.3:h:cisco:asr_901-12c-ft-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A46BB1E3-D813-4C19-81FA-96B8EF3E2F7B"}, {"criteria": "cpe:2.3:h:cisco:asr_901-4c-f-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "64E9CCC6-CA54-44C4-9A41-D2CA3A25BE8C"}, {"criteria": "cpe:2.3:h:cisco:asr_901-4c-ft-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BC4E0CC8-9C67-4EB0-97A1-BAEFC6E9708A"}, {"criteria": "cpe:2.3:h:cisco:asr_901-6cz-f-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DDB1A95C-8513-4CC7-8CDF-012B212FF02F"}, {"criteria": "cpe:2.3:h:cisco:asr_901-6cz-f-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AE761B1C-D749-4E1B-9A4A-7F41D1DF9C8C"}, {"criteria": "cpe:2.3:h:cisco:asr_901-6cz-ft-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6C2A515C-797D-47EE-8051-F3FBE417BCE9"}, {"criteria": "cpe:2.3:h:cisco:asr_901-6cz-ft-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E673A75F-EFF8-4591-8E0F-A21083563DBA"}, {"criteria": "cpe:2.3:h:cisco:me_3600x-24cx-m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C03D362E-8431-46D9-A214-9BF421299095"}, {"criteria": "cpe:2.3:h:cisco:me_3600x-24fs-m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3D49393A-23B1-4B8A-8057-BA08745C9764"}, {"criteria": "cpe:2.3:h:cisco:me_3600x-24ts-m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0FD4E0EA-5F54-4916-B379-5FDA231BC6A7"}, {"criteria": "cpe:2.3:h:cisco:me_3800x-24fs-m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BA69BC08-9866-4B72-8491-A8E3FFCEF541"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xe:15.3\\(3\\)s:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ABE8D4E6-7906-4680-A1DF-71FF3D43716F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:asr_901-12c-f-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D6279A69-2F9D-4CD9-9C19-62E701C3C4F9"}, {"criteria": "cpe:2.3:h:cisco:asr_901-12c-ft-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A46BB1E3-D813-4C19-81FA-96B8EF3E2F7B"}, {"criteria": "cpe:2.3:h:cisco:asr_901-4c-f-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "64E9CCC6-CA54-44C4-9A41-D2CA3A25BE8C"}, {"criteria": "cpe:2.3:h:cisco:asr_901-4c-ft-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BC4E0CC8-9C67-4EB0-97A1-BAEFC6E9708A"}, {"criteria": "cpe:2.3:h:cisco:asr_901-6cz-f-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DDB1A95C-8513-4CC7-8CDF-012B212FF02F"}, {"criteria": "cpe:2.3:h:cisco:asr_901-6cz-f-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AE761B1C-D749-4E1B-9A4A-7F41D1DF9C8C"}, {"criteria": "cpe:2.3:h:cisco:asr_901-6cz-ft-a:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6C2A515C-797D-47EE-8051-F3FBE417BCE9"}, {"criteria": "cpe:2.3:h:cisco:asr_901-6cz-ft-d:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E673A75F-EFF8-4591-8E0F-A21083563DBA"}, {"criteria": "cpe:2.3:h:cisco:me_3600x-24cx-m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C03D362E-8431-46D9-A214-9BF421299095"}, {"criteria": "cpe:2.3:h:cisco:me_3600x-24fs-m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3D49393A-23B1-4B8A-8057-BA08745C9764"}, {"criteria": "cpe:2.3:h:cisco:me_3600x-24ts-m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0FD4E0EA-5F54-4916-B379-5FDA231BC6A7"}, {"criteria": "cpe:2.3:h:cisco:me_3800x-24fs-m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BA69BC08-9866-4B72-8491-A8E3FFCEF541"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ykramarz@cisco.com", "cisaRequiredAction": "Apply updates per vendor instructions.", "cisaVulnerabilityName": "Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability"}

7.5 /10

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

7.8 /10

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

JSON object

Attach tags to CVE-2018-0159

7.5^/10

7.8^/10

Attach tags to `CVE-2018-0159`