CVE-2018-0475
Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerability
- State
- Published
- Severity
- Not scored
- Published
- Oct 5, 2018
- Updated
- Nov 26, 2024
- Reserved
- Nov 27, 2017
Description
A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation when handling Cluster Management Protocol (CMP) messages. An attacker could exploit this vulnerability by sending a malicious CMP message to an affected device. A successful exploit could allow the attacker to cause the switch to crash and reload or to hang, resulting in a DoS condition. If the switch hangs it will not reboot automatically, and it will need to be power cycled manually to recover.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco IOS SoftwareCisco |
|
References
- 105404vdb-entry
- 20180926 Cisco IOS and IOS XE Software Cluster Management Protocol Denial of Service Vulnerabilityvendor-advisory
- 1041737vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.