CVE-2018-0484

mediumpriority · track · 26EPSS 0.008 · 56 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.79% (56th) EPSS

CVSS 4 · medium

Is it mine?

43 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisco_csaf

EPSS · scored 2026-10-27

A vulnerability in the access control logic of the Secure Shell (SSH) server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding (VRF) instance despite the absence of the vrf-also keyword in the access-class configuration. The vulnerability is due to a missing check in the SSH server. An attacker could use this vulnerability to open an SSH connection to an affected Cisco IOS or IOS XE device with a source address belonging to a VRF instance. Once connected, the attacker would still need to provide valid credentials to access the device.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixed12.2(60)EZ12cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed15.7(3)M3cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed15.8(3)Mcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed15.8(3)M0acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed15.8(3)M0bcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed16.6.3cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed16.6.4cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed16.6.4acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Fixed16.6.4scisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

cvss

Technical severity, 0–10. One row per scoring source.

6.5

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.04mediumAV:N/AC:L/Au:S/C:N/I:P/A:Nprimary · NVD / NIST USexploitability 8 · impact 2.9

v3.06.5mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:Nprimary · NVD / NIST USexploitability 2.8 · impact 3.6

v3.05.3mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nsecondary · ENISA EU

v3.05.3mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nsecondary · Cisco PSIRT US

v3.05.3mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nsecondary · psirt@cisco.com USexploitability 3.9 · impact 1.4

v3.06mediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.15.3mediumAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nsecondary · FSTEC (BDU) RU

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-284USCWE-284US

affected products (43)

Products and version ranges known to be affected.

Cisco 12.2(60)EZ12all versionscisco_csafUS
Cisco 15.7(3)M3all versionscisco_csafUS
Cisco 15.8(3)Mall versionscisco_csafUS
Cisco 15.8(3)M0aall versionscisco_csafUS
Cisco 15.8(3)M0ball versionscisco_csafUS
Cisco 16.6.3all versionscisco_csafUS
Cisco 16.6.4all versionscisco_csafUS
Cisco 16.6.4aall versionscisco_csafUS
Cisco 16.6.4sall versionscisco_csafUS
Cisco Cisco IOS≤ n/aenisa_euvdEU
Cisco Systems Inc. Cisco IOS≤ 15.1(3)SVO1fstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 15.3(3)JI2fstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 15.1(3)SVN2fstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 15.1(3)SVO2fstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 15.1(3)SVP1fstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 12.2(6)I1fstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 15.8(3)M0bfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 15.8(3)M0afstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 15.8(3)Mfstec_bduRU
Cisco Systems Inc. Cisco IOS≤ 15.1(3)SVM3fstec_bduRU

showing 20 of 43

advisories (1)

Vendor and ecosystem advisories describing this.

cisco-sa-20190109-ios-ssh-vrfCisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability2019-01-09csaf · cisco_csafUS
A vulnerability in the access control logic of the Secure Shell (SSH) server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding (VRF) instance despite the absence of the vrf-also keyword in the access-class configuration. The vulnerability is due to a missing check in the SSH server. An attacker could use this vulnerability to open an SSH connection to an affected Cisco IOS or IOS XE device with a source address belonging to a VRF instance. Once connected, the attacker would still need to provide valid credentials to access the device. There are no workarounds that address this vulnerability.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cisco_csaf NVD CVE.org MITRE

published 2019-01-10modified 2026-06-17

references (7)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan