CVE-2018-0257
MEDIUMCisco IOS XE 3.18-3.18.4 - Unauthenticated Denial of Service via DHCP Packet Handling
Title source: llmDescription
A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent attacker to cause high CPU usage on an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to the incorrect handling of certain DHCP packets. An attacker could exploit this vulnerability by sending certain DHCP packets to a specific segment of an affected device. A successful exploit could allow the attacker to increase CPU usage on the affected device and cause a DoS condition. Cisco Bug IDs: CSCvg73687.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1040716
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/103948
Vendor Advisory x_refsource_confirm
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-cbr8
Scores
CVSS v3
4.3
EPSS
0.0080
EPSS Percentile
52.7%
Attack Vector
ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-399
Status
published
Products (4)
cisco/ios_xe
15.6\(2\)sp
cisco/ios_xe
16.4
cisco/ios_xe
16.5
cisco/ios_xe
3.18 - 3.18.4
Published
Apr 19, 2018
Tracked Since
Feb 18, 2026