CVE-2018-0174VulnerabilityPublished 03/03/2022Updated 10/24/2026
CVE-2018-0174: Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
Affects Cisco IOS XE SoftwareSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 03/03/2022
- KEV deadline
- 03/17/2022
- EPSS
- 7.6% chance of exploitation in 30 days – higher than 94% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2018-0174 is a high-severity vulnerability in Cisco IOS and IOS XE Software related to improper input validation in the DHCP option 82 encapsulation functionality. This flaw can be exploited to cause a denial-of-service (DoS) condition. The vulnerability has been observed to be exploited in the wild. No specific affected versions or patch information is provided in the available data.