CVE-2018-0179 Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a...
MediumCVSS 5.9
EPSS 4.9%
CISA KEV
added 2022-03-03 · due 2022-03-17
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-17
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | = 15.3(00.00.19)sy | No fix listed |
| cisco ios | = 15.4(01)ia001.100 | No fix listed |
| cisco ios | = 15.6(01.22)t | No fix listed |
| cisco ios | = 15.4(03)m4.1 | No fix listed |
| cisco ios | = 15.4(2)cg | No fix listed |
| cisco ios | = 15.4(2)t | No fix listed |
| cisco ios | = 15.4(3)m | No fix listed |
References
- 103556 broken-link third-party-advisory vdb-entry
- tools.cisco.com vendor-advisory
- www.cisa.gov government-resource us-government-resource