CVEs / CVE-2018-0161
CVE-2018-0161: Cisco IOS Software Resource Management Errors Vulnerability
- Known exploited in the CISA KEV catalog since 3 Mar 2022
- medium 6.3 CVSS 3.1 (NVD)
- EPSS 4.11% chance of exploitation in the next 30 days, higher than 90% of CVEs (30 Oct 2026)
- Last changed at its sources
Are you affected? Check your servers with Stackurity: it lists the software on each server and the vulnerabilities to fix first.
Check your servers with Stackurity Already using Stackurity? Search for CVE-2018-0161
Summary
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition.
Description
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Object ID Denial of Service Vulnerability. The vulnerability is due to a condition that could occur when the affected software processes an SNMP read request that contains a request for the ciscoFlashMIB object ID (OID). An attacker could trigger this vulnerability by issuing an SNMP GET request for the ciscoFlashMIB OID on an affected device. A successful exploit could cause the affected device to restart due to a SYS-3-CPUHOG. This vulnerability affects the following Cisco devices if they are running a vulnerable release of Cisco IOS Software and are configured to use SNMP Version 2 (SNMPv2) or SNMP Version 3 (SNMPv3): Cisco Catalyst 2960-L Series Switches, Cisco Catalyst Digital Building Series Switches 8P, Cisco Catalyst Digital Building Series Switches 8U. Cisco Bug IDs: CSCvd89541.
Affected and fixed versions
| Product | Affected | Fixed in |
|---|---|---|
| n/a Cisco IOS | Cisco IOS | — |
Exploitation
| In CISA KEV since | 3 Mar 2022 |
|---|---|
| Due date for US federal agencies | 17 Mar 2022 |
| Used in ransomware campaigns | Unknown |
| Required action | Apply updates per vendor instructions. |
Severity
| CVSS 3.1 | 6.3 mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:HScored by NVD |
|---|---|
| Weakness | CWE-399 |
References
- CVE-2018-0161 on NVD
- CVE-2018-0161 in the CISA KEV catalog
- http://www.securityfocus.com/bid/103573 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040589 Broken Link, Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp Mitigation, Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0161 US Government Resource
Sources
Exploitation status from the CISA Known Exploited Vulnerabilities catalog. EPSS scores from FIRST. Descriptions, severity and references from the National Vulnerability Database. Open-source package versions from OSV (CC-BY 4.0). Text is shown as each source states it; Stackurity does not edit it. Check the vendor's advisory before acting.
This product uses data from the NVD API but is not endorsed or certified by the NVD.