CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-03-28
Cisco IOS ISM-VPN Crypto Engine Remote Denial of Service Vulnerability (CVE-2018-0154)
[Affected Scope] Cisco router devices running Cisco IOS Software equipped with the Integrated Services Module for VPN (ISM-VPN).
[Impact] An unauthenticated, remote attacker can cause a complete Denial of Service (DoS) condition, hanging or crashing the device by sending crafted VPN traffic.
[Mitigation] Apply the official Cisco IOS software updates immediately and restrict unauthorized VPN traffic using Access Control Lists (ACLs).