What’s Vulnerable › Vulnerabilities

CVE-2018-0131

• Severity: medium (CVSS 5.9 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-08-14 · updated 2026-06-17
• Weakness: CWE-326

Description

A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the encrypted nonces of an Internet Key Exchange Version 1 (IKEv1) session. The vulnerability exists because the affected software responds incorrectly to decryption failures. An attacker could exploit this vulnerability sending crafted ciphertexts to a device configured with IKEv1 that uses RSA-encrypted nonces. A successful exploit could allow the attacker to obtain the encrypted nonces. Cisco Bug IDs: CSCve77140.

Affected products

• Cisco IOS: 15.5(3)s
• Cisco IOS XE: 15.5(3)s

References

• http://www.securityfocus.com/bid/105074
• http://www.securitytracker.com/id/1041539
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180813-rsa-nonce
• http://www.securityfocus.com/bid/105074
• http://www.securitytracker.com/id/1041539
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180813-rsa-nonce

Get alerted when CVE-2018-0131 or the next vulnerability affects your stack