Cisco IOS: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 34

• Critical 9.8
  CVE-2018-0151 Exploited EPSS 14%

  A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow a…

  iOS
  Mar 28, 2018

  KEV Mar 3, 2022
• High 8.6
  CVE-2018-0158 Exploited

  A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software c…

  iOS
  Mar 28, 2018

  KEV Mar 3, 2022
• High 8.6
  CVE-2018-0172 Exploited

  A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

  iOS
  Mar 28, 2018

  KEV Mar 3, 2022
• High 8.6
  CVE-2018-0173 Exploited

  A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 infor…

  iOS
  Mar 28, 2018

  KEV Mar 3, 2022
• High 8.6
  CVE-2018-0174 Exploited

  A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could…

  iOS
  Mar 28, 2018

  KEV Mar 3, 2022
• High 7.5
  CVE-2018-0154 Exploited

  A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Softwa…

  iOS
  Mar 28, 2018

  KEV Mar 3, 2022
• High 7.5
  CVE-2018-0156 Exploited

  A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic…

  iOS
  Mar 28, 2018

  KEV Mar 3, 2022
• High 7.5
  CVE-2018-0159 Exploited

  A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software an…

  iOS
  Mar 28, 2018

  KEV Mar 3, 2022
• High 7.5
  CVE-2018-0171 Exploited Public exploit Scanner template EPSS 99%

  A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthentic…

  iOS
  Mar 28, 2018

  KEV Nov 3, 2021
• Medium 6.8
  CVE-2018-0179 Exploited

  Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthent…

  iOS
  Mar 28, 2018

  KEV Mar 3, 2022
• Medium 6.8
  CVE-2018-0180 Exploited

  Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthent…

  iOS
  Mar 28, 2018

  KEV Mar 3, 2022
• Medium 6.3
  CVE-2018-0161 Exploited

  A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain mod…

  iOS
  Mar 28, 2018

  KEV Mar 3, 2022
• Unscored —
  CVE-2018-0150

  A vulnerability in Cisco IOS XE Software could allow an unauthenticated, remote attacker to log in to a device running …

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0152

  A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote …

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0157

  A vulnerability in the Zone-Based Firewall code of Cisco IOS XE Software could allow an unauthenticated, remote attacke…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0160

  A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenti…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0163

  A vulnerability in the 802.1x multiple-authentication (multi-auth) feature of Cisco IOS Software could allow an unauthe…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0164

  A vulnerability in the Switch Integrated Security Features of Cisco IOS XE Software could allow an unauthenticated, rem…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0165

  A vulnerability in the Internet Group Management Protocol (IGMP) packet-processing functionality of Cisco IOS XE Softwa…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0169

  Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gai…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0170

  A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remo…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0176

  Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gai…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0182

  Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inj…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0183

  A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access …

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0184

  A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access …

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0185

  Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inj…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0186

  Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticat…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0188

  Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticat…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0189

  A vulnerability in the Forwarding Information Base (FIB) code of Cisco IOS Software and Cisco IOS XE Software could all…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0190

  Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticat…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0193

  Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inj…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0194

  Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inj…

  iOS
  Apr 2, 2018
• Unscored —
  CVE-2018-0195

  A vulnerability in the Cisco IOS XE Software REST API could allow an authenticated, remote attacker to bypass API autho…

  iOS
  Mar 28, 2018
• Unscored —
  CVE-2018-0196

  A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote …

  iOS
  Mar 28, 2018

Revision history

1. 2025-08-20 #4

   CVE-2018-0171 wird ausgenutzt

2. 2018-04-09 #3

   New remediations available

3. 2018-03-28 #1

   Initial Release

4. 2018-03-28 #2

   Version nicht vorhanden

References

• Cisco Security Advisory cisco-sa-20180328-webuixss vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-webuixss
• Cisco Security Advisory cisco-sa-20180328-sisf vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-sisf
• Cisco Security Advisory cisco-sa-20180328-cmdinj vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-cmdinj
• Cisco Security Advisory cisco-sa-20180328-FIB-dos vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-FIB-dos
• Cisco Security Advisory cisco-sa-20180328-igmp vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-igmp
• Cisco Security Advisory cisco-sa-20180328-wfw vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-wfw
• Cisco Security Advisory cisco-sa-20180328-qos vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-qos
• Cisco Security Advisory cisco-sa-20180328-slogin vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin
• Cisco Security Advisory cisco-sa-20180328-dot1x vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dot1x
• Cisco Security Advisory cisco-sa-20180328-snmp-dos vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp-dos
• Cisco Security Advisory cisco-sa-20180328-opendns-dos vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-opendns-dos
• Cisco Security Advisory cisco-sa-20180328-ike-dos vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike-dos
• Cisco Security Advisory cisco-sa-20180328-xesc vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-xesc
• Cisco Security Advisory cisco-sa-20180328-rest vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-rest
• Cisco Security Advisory cisco-sa-20180328-xepriv vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-xepriv
• Cisco Security Advisory cisco-sa-20180328-ike vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike
• Cisco Security Advisory cisco-sa-20180328-dos vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dos
• Cisco Security Advisory cisco-sa-20180328-privesc3 vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-privesc3
• Cisco Security Advisory cisco-sa-20180328-privesc2 vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-privesc2
• Cisco Security Advisory cisco-sa-20180328-privesc1 vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-privesc1
• Cisco Security Advisory cisco-sa-20180328-dhcpr3 vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3
• Cisco Security Advisory cisco-sa-20180328-dhcpr2 vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr2
• Cisco Security Advisory cisco-sa-20180328-dhcpr1 vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr1
• Cisco Security Advisory cisco-sa-20180328-smi2 vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2
• Cisco Security Advisory cisco-sa-20180328-smi vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi
• Cisco Security Advisory cisco-sa-20180328-snmp vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp
• Cisco Security Advisory cisco-sa-20180328-fwip vom 2018-03-28
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-fwip
• Cisco Security Advisory: cisco-sa-20180409-smi
  https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180409-smi
• Cisco Security Advisory cisco-sa-20180328-smi2 vom 2025-08-20
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2
• FBI Alert I-082025-PSA vom 2025-08-20
  http://www.ic3.gov/PSA/2025/PSA250820