CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-03-28
Cisco IOS Catalyst Switches SNMP ciscoFlashMIB Denial of Service Vulnerability (CVE-2018-0161) Technical Advisory
[Affected Scope] Cisco Catalyst 2960-L Series, Catalyst Digital Building Series 8P, and 8U Switches running vulnerable Cisco IOS and configured with SNMPv2 or SNMPv3.
[Impact] An authenticated remote attacker can trigger a device reload (Denial of Service) via a SYS-3-CPUHOG error by sending a crafted SNMP GET request for the ciscoFlashMIB OID.
[Mitigation] Apply the official Cisco IOS software updates, or implement SNMP MIB views to exclude access to the ciscoFlashMIB OID and restrict SNMP access using ACLs.