CVE-2018-0179

{"id": "CVE-2018-0179", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.2}]}, "published": "2018-03-28T22:29:01.467", "references": [{"url": "http://www.securityfocus.com/bid/103556", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-399"}]}], "descriptions": [{"lang": "en", "value": "Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades en la caracter\u00edstica Login Enhancements (Login Block) de Cisco IOS Software permite que un atacante remoto no autenticado desencadene el reinicio de un sistema afectado. Esto resulta una condici\u00f3n de denegaci\u00f3n de servicio (DoS). Estas vulnerabilidades afectan a los dispositivos Cisco que ejecutan Cisco IOS Software Release 15.4(2)T, 15.4(3)M o 15.4(2)CG y siguientes. Cisco Bug IDs: CSCuy32360, CSCuz60599."}], "lastModified": "2019-10-09T23:31:23.817", "cisaActionDue": "2022-03-17", "cisaExploitAdd": "2022-03-03", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios:15.3\\(0.0.19\\)sy:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8894616C-E328-4167-A2A1-2210E7B18704"}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(1\\)ia1.100:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA528E9B-6704-4563-B420-41E4AB064036"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(1.22\\)t:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22294202-CAF2-479D-B606-CA2207A22BC6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:1921:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B186AC90-AB50-487E-843C-354AED2A7939"}, {"criteria": "cpe:2.3:h:cisco:1941:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4B8367AC-EA3C-4D89-8387-9D3DF5D9552B"}, {"criteria": "cpe:2.3:h:cisco:1941w:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B4AF16CC-AB6C-4B25-BB52-143E0952E44C"}, {"criteria": "cpe:2.3:h:cisco:2901:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D946FEE4-57E9-44DF-92B1-F4753B3AC317"}, {"criteria": "cpe:2.3:h:cisco:2911:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6A4A0846-F0D2-4EBA-89A8-827E23FC49B7"}, {"criteria": "cpe:2.3:h:cisco:2921:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "62A88048-98BC-4803-AD86-F43A100141FA"}, {"criteria": "cpe:2.3:h:cisco:2951:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "60DDF683-9227-4351-8FB1-10EF41522FB2"}, {"criteria": "cpe:2.3:h:cisco:3925:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2D51456F-D87C-406C-900B-34ABC2A81625"}, {"criteria": "cpe:2.3:h:cisco:3925e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8EA5436A-933D-4975-A8EF-EB2B72D234F5"}, {"criteria": "cpe:2.3:h:cisco:3945:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "898464E4-B3B5-4231-A8AA-CA811EC0D974"}, {"criteria": "cpe:2.3:h:cisco:3945e:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "576DE1E1-F85F-423D-95CE-8B6946A36E58"}, {"criteria": "cpe:2.3:h:cisco:4451-x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "36B8B210-127D-4006-AED5-90E76EEDED93"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios:15.3\\(0.0.19\\)sy:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8894616C-E328-4167-A2A1-2210E7B18704"}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(3\\)m4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87BA352E-4C21-4428-A64B-E0C8B8287791"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F40A3CD1-AD12-4612-8386-F1BC2EBD11AF", "versionStartIncluding": "15.4\\(2\\)cg"}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(2\\)t:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74E1226B-46CF-4C82-911A-86C818A75DFA"}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(3\\)m:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C85BAAF-819B-40E7-9099-04AA8D9AB114"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com", "cisaRequiredAction": "Apply updates per vendor instructions.", "cisaVulnerabilityName": "Cisco IOS Software Denial-of-Service Vulnerability"}