Secuno
ENNL
Book demo

CVE-2018-0161

Cisco IOS Software Resource Management Errors

6.3 MEDIUMActively exploited (CISA KEV)EPSS 4.12%
  1. Published28 Mar 2018
  2. Added to CISA KEV3 Mar 2022
  3. Remediation due17 Mar 2022
Actively exploited (CISA KEV)

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition.

Added to KEV: 3 Mar 2022Federal remediation due: 17 Mar 2022

Description

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Object ID Denial of Service Vulnerability. The vulnerability is due to a condition that could occur when the affected software processes an SNMP read request that contains a request for the ciscoFlashMIB object ID (OID). An attacker could trigger this vulnerability by issuing an SNMP GET request for the ciscoFlashMIB OID on an affected device. A successful exploit could cause the affected device to restart due to a SYS-3-CPUHOG. This vulnerability affects the following Cisco devices if they are running a vulnerable release of Cisco IOS Software and are configured to use SNMP Version 2 (SNMPv2) or SNMP Version 3 (SNMPv3): Cisco Catalyst 2960-L Series Switches, Cisco Catalyst Digital Building Series Switches 8P, Cisco Catalyst Digital Building Series Switches 8U. Cisco Bug IDs: CSCvd89541.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityHigh
Privileges requiredLow
User interactionNone
ScopeChanged
ConfidentialityNone
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Cisco iOS15.2\(5\)e

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2022-207678.6
A vulnerability in the Snort rule evaluation function of Cisco Firepower Threat Defense…
CVE-2022-207158.6
A vulnerability in the remote access SSL VPN features of Cisco Adaptive Security…
CVE-2019-152568.6
A vulnerability in the Internet Key Exchange version 1 (IKEv1) feature of Cisco…
CVE-2018-02408.6
Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco…
CVE-2017-38648.6
A vulnerability in the DHCP client implementation of Cisco IOS (12.2, 12.4, and 15.0…
CVE-2016-13639.8
Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC)…

Frequently asked

Is CVE-2018-0161 being actively exploited?

Yes. CVE-2018-0161 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 3 Mar 2022.

How severe is CVE-2018-0161?

CVE-2018-0161 has a CVSS 3.1 base score of 6.3, rated medium. EPSS estimates a 4.12% probability of exploitation.

Which products are affected by CVE-2018-0161?

Affected products include Cisco iOS.

How do I fix CVE-2018-0161?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2018-0161 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, Secuno flags any affected asset as top-priority automatically. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.