CVE-2018-0159
published 2018-03-28CVE-2018-0159: A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an…
PriorityP277high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
KEVITW
CISA Known Exploited Vulnerabilitydue 2022-03-17
Exploited in the wild
EPSS
7.00%
93.5th percentile
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of specific IKEv1 packets. An attacker could exploit this vulnerability by sending crafted IKEv1 packets to an affected device during an IKE negotiation. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuj73916.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios_and_ios_xe | — | — |
| cisco | ios_xe | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Exploit vector targets IKEv1 packets sent during an IKE negotiation; monitor for crafted/malformed IKEv1 packets directed at Cisco IOS/IOS XE devices ↗
- →Trigger condition is improper validation of specific IKEv1 packets; alert on unexpected device reloads (DoS) on IKEv1-enabled Cisco IOS/IOS XE devices correlated with inbound IKE traffic ↗
- ·No workarounds are available for this vulnerability; the only mitigation is applying vendor-supplied software updates ↗
- ·Vulnerability affects both Cisco IOS Software and Cisco IOS XE Software; scope of affected devices should be confirmed against Cisco Bug ID CSCuj73916 ↗
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vulncheck7.5HIGH
cisa7.5HIGH
vendor_cisco8.6HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA
Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
cisa·2022-03-03·CVSS 7.5
CVE-2018-0159 [HIGH] CWE-20 Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
Vulnerability: Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
Affected: Cisco IOS Software and Cisco IOS XE Software
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2018-0159
Remediation Due Date: 2022-03-17
Cisco
Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability
vendor_cisco·2018-03-28·CVSS 8.6
CVE-2018-0159 [HIGH] CWE-20 Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability
Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition.
The vulnerability is due to improper validation of specific IKEv1 packets. An attacker could exploit this vulnerability by sending crafted IKEv1 packets to an affected device during an IKE negotiation. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition.
Cisco has released software updates that address this vulnerability. There are no workarounds that address
Cisco
Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability
vendor_cisco·CVSS 3.0
CVE-2018-0159 Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability
CVE-2018-0159: Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of specific IKEv1 packets. An attacker could exploit this vulnerability by sending crafted IKEv1 packets to an affected device during an IKE negotiation. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no
CVSS: 3.0
CW
GHSA
GHSA-p7j7-5cqq-j6m7: A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could a
ghsa_unreviewed·2022-05-13
CVE-2018-0159 [HIGH] CWE-20 GHSA-p7j7-5cqq-j6m7: A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could a
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of specific IKEv1 packets. An attacker could exploit this vulnerability by sending crafted IKEv1 packets to an affected device during an IKE negotiation. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuj73916.
VulnCheck
Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
vulncheck·2018·CVSS 7.5
CVE-2018-0159 [HIGH] CWE-20 Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.
Affected: Cisco IOS and IOS XE Software
Required Action: Apply updates per vendor instructions.
Exploitation References: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json; https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20180328-ike-dos.html
Remediation Due: 2022-03-17
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/103562http://www.securitytracker.com/id/1040595https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike-doshttp://www.securityfocus.com/bid/103562http://www.securitytracker.com/id/1040595https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike-doshttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0159
2018-03-28
Published
2022-03-03
Added to CISA KEV
Exploited in the wild