Threat database

CVE-2018-0180 is a vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software that allows an unauthenticated remote attacker to cause a denial of service by triggering a system reload. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0179 is a high-severity vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software. It allows an unauthenticated remote attacker to cause the affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2018-0161 is a vulnerability in the SNMP subsystem of Cisco IOS Software on certain Cisco Catalyst Switch models. It allows an authenticated remote attacker to cause a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0154 is a high-severity vulnerability in the crypto engine of Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software. It allows an unauthenticated remote attacker to cause a denial-of-service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0159 is a denial-of-service vulnerability in the Internet Key Exchange Version 1 (IKEv1) implementation of Cisco IOS and IOS XE Software. An unauthenticated remote attacker can exploit this flaw to cause the affected device to reload, disrupting network operations. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0158 is a high-severity vulnerability in Cisco IOS and IOS XE Software affecting the Internet Key Exchange Version 1 (IKEv1) implementation. An unauthenticated remote attacker can exploit this flaw to cause the affected device to reload, resulting in a denial-of-service (DoS) condition. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2018-0156 is a vulnerability in the Smart Install feature of Cisco IOS and IOS XE Software that allows an unauthenticated remote attacker to cause a device reload, resulting in a denial-of-service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

CVE-2018-0174 is a high-severity vulnerability in Cisco IOS and IOS XE Software related to improper input validation in the DHCP option 82 encapsulation functionality. This flaw can be exploited to cause a denial-of-service (DoS) condition. The vulnerability has been observed to be exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2017-12319 is a vulnerability in Cisco IOS XE Software's Border Gateway Protocol (BGP) over Ethernet Virtual Private Network (EVPN) that allows an unauthenticated remote attacker to cause a device reload, leading to denial of service, or potentially corrupt the BGP routing table, causing network instability.

CVE-2018-0173 is a vulnerability in Cisco IOS and IOS XE Software related to improper input validation in the function that restores encapsulated option 82 information in DHCPv4 packets. This flaw can be exploited to cause a denial-of-service (DoS) condition. The vulnerability has been observed to be exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2018-0172 is a high-severity vulnerability in Cisco IOS and IOS XE Software related to improper input validation in the DHCP option 82 encapsulation functionality. This flaw can be exploited to cause a denial-of-service (DoS) condition. The vulnerability has been observed to be exploited in the wild. No specific affected versions or patch information is provided in the input data.

CVE-2018-0151 is a high-severity vulnerability in the Quality of Service (QoS) subsystem of Cisco IOS and IOS XE Software. It allows an unauthenticated remote attacker to cause denial of service or execute arbitrary code with elevated privileges. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2017-6743 is a high-severity vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE software. It allows an authenticated remote attacker to execute arbitrary code on affected devices. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2017-6740 is a vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software that allows an authenticated remote attacker to execute code or cause the system to reload. It has been exploited in the wild. The vulnerability is classified as high severity due to its potential impact on system availability and control.

CVE-2017-6739 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software that allows an authenticated remote attacker to execute code or cause the system to reload. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2017-6738 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software that allows an authenticated remote attacker to execute code remotely. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.

CVE-2017-6737 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software that allows an authenticated remote attacker to execute code remotely. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2017-6736 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software that allows an authenticated remote attacker to execute code remotely. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

CVE-2017-6663 is a denial-of-service vulnerability in the Autonomic Networking feature of Cisco IOS and IOS XE Software. An unauthenticated attacker adjacent to the network could exploit this flaw to cause affected autonomic nodes to reload, disrupting service availability. This vulnerability has been exploited in the wild.

CVE-2017-6627 is a denial-of-service vulnerability in the UDP packet processing code of Cisco IOS and IOS XE software. An unauthenticated remote attacker can exploit this flaw to cause the input queue to hold UDP packets, resulting in an interface queue wedge and denial of service. This vulnerability has been exploited in the wild.