CyberSecBulletin

Cisco IOS vulnerabilities

We track 10 vulnerabilities in Cisco IOS products. 5 are rated high or critical, and 10 have been exploited in real attacks. The most recent was published on March 28, 2018.

10vulnerabilities
0critical
5high
10exploited
6.9average CVSS score

Latest Cisco IOS vulnerabilities

  • 5.9 Medium severity

    Cisco IOS Software Denial-of-Service Exploited

    CVE-2018-0180Cisco IOSEPSS 4.93%

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities af

  • 5.9 Medium severity

    Cisco IOS Software Denial-of-Service Exploited

    CVE-2018-0179Cisco IOSEPSS 4.93%

    Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities af

  • 6.3 Medium severity

    Cisco IOS Software Resource Management Errors Exploited

    CVE-2018-0161Cisco IOSEPSS 4.12%

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Obje

  • 7.5 High severity

    Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Exploited

    CVE-2018-0154Cisco IOSEPSS 7.07%

    A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is d

  • 6.5 Medium severity

    Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Exploited

    CVE-2017-12238Cisco IOSEPSS 2.02%

    A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adjacent attacker to cause a C6800-16P10G or C6800-16P10G-XL type line card to crash, resultin

  • 7.5 High severity

    Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Exploited

    CVE-2017-12235Cisco IOSEPSS 7.07%

    A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) co

  • 7.5 High severity

    Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Exploited

    CVE-2017-12234Cisco IOSEPSS 7.07%

    Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) conditio

  • 7.5 High severity

    Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Exploited

    CVE-2017-12233Cisco IOSEPSS 7.07%

    Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) conditio

  • 6.5 Medium severity

    Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Exploited

    CVE-2017-12232Cisco IOSEPSS 2.15%

    A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a d

  • 7.5 High severity

    Cisco IOS Software Network Address Translation Denial-of-Service Exploited

    CVE-2017-12231Cisco IOSEPSS 7.07%

    A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due