CVE-2018-0173VulnerabilityPublished 03/03/2022Updated 10/24/2026
CVE-2018-0173: Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
Affects Cisco IOS and IOS XE SoftwareSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 03/03/2022
- KEV deadline
- 03/17/2022
- EPSS
- 7.6% chance of exploitation in 30 days – higher than 94% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2018-0173 is a vulnerability in Cisco IOS and IOS XE Software related to improper input validation in the function that restores encapsulated option 82 information in DHCPv4 packets. This flaw can be exploited to cause a denial-of-service (DoS) condition. The vulnerability has been observed to be exploited in the wild. No specific affected versions or patch information are provided in the available data.