CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“2 of 2 advisories (Page 1/1)
CVE-2018-01738.6/HIGHEPSS 7.6%CISA KEV
2018-03-28

Cisco IOS and IOS XE DHCPv4 Option 82 Input Validation Remote Denial of Service Vulnerability (CVE-2018-0173)

[Affected Scope] Cisco devices running Cisco IOS and IOS XE Software with encapsulated DHCPv4 Option 82 restoration enabled

[Impact] An unauthenticated, remote attacker can cause an affected device to reload, resulting in a complete Denial of Service (DoS) condition

[Mitigation] Apply official software updates from Cisco or implement workarounds by hardening DHCP snooping and relay configurations

CVE-2018-01728.6/HIGHEPSS 7.8%CISA KEV
2018-03-28

Cisco IOS and IOS XE DHCP Option 82 Encapsulation Heap Overflow Vulnerability (CVE-2018-0172) Analysis and Mitigation Guide

[Affected Scope] Cisco IOS and IOS XE Software with DHCP Option 82 relay functionality enabled

[Impact] Unauthenticated, remote attackers can trigger a heap overflow and force a device reload, leading to a complete Denial of Service (DoS)

[Mitigation] Apply official Cisco software updates immediately, or disable DHCP Option 82 relay features and restrict untrusted DHCP traffic

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse