Cisco IOS Software Integrated Services Module for VPN Denial of Service Vulnerability
A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient handling of VPN traffic by the affected device. An attacker could exploit this vulnerability by sending crafted VPN traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to hang or crash, resulting in a DoS condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dos ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dos"] This advisory is part of the March 28, 2018, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 20 Cisco Security Advisories that describe 22 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: March 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication. ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-66682"]
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-0154US | high7.5OT critical | KEV | ||
A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a… | ||||
references
External citations — patches, advisories, analysis.
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dosexternal
- Security Vulnerability Policyexternal
- Cisco IOS Software Checkerexternal
- Cisco Event Response: March 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.external
- Cisco IOS and NX-OS Software Reference Guideexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
- https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.htmlexternal
- Cisco Security Advisories and Alerts pageexternal
remediations (48)
- Fixed15.1(3)SVR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVS
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVS1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU11
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU20
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU21
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVW
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVW1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVX
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVX1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(4)M10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(4)M11
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(4)M8
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(4)M9
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.3(3)M10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.3(3)M6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.3(3)M7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.3(3)M8
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.3(3)M8a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.3(3)M9
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.4(3)M4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.4(3)M5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.4(3)M6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.4(3)M6a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.4(3)M7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.5(1)T2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.5(1)T3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.5(1)T4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.5(2)T
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.5(2)T1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.5(2)T2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.5(2)T3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.5(2)T4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.5(2)XB
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan