CVE-2018-0273

CWE-3994 documents4 sources
Severity
5.3MEDIUM
EPSS
0.8%
top 25.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Staros
Timeline
PublishedApr 19
Latest updateMay 13

Description

A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet Core (VPC) System Software could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from being established, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of corrupted Internet Key Exchange Version 2 (IKEv2) messages. An attacker could exploit this vul…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5cisco_staros_ipsec_managerCisco StarOS IPsec Manager
▶NVDcisco/staros5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-vx8f-xw5m-52fj: A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet Core (VPC)↗2022-05-13
▶
CVEList
CVE-2018-0273: A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet Core (VPC)↗2018-04-19
▶

📋Vendor Advisories

1
Cisco
Cisco StarOS IPsec Manager Denial of Service Vulnerability↗2018-04-18
▶
CVE-2018-0273 (MEDIUM CVSS 5.3) | A vulnerability in the IPsec Manage | cvebase.io