CVE-2018-0179: Cisco IOS Software Denial-of-Service Vulnerability

Severity: medium (CVSS 5.9 v3.1)
Exploited in the wild: yes — in CISA KEV since 2022-03-03
EPSS: 4.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-28 · updated 2026-06-17
Weakness: CWE-399

Description

Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599.

Affected products

Cisco IOS: 15.3(00.00.19)sy, 15.4(01)ia001.100, 15.6(01.22)t, 15.4(03)m4.1, 15.4(2)cg, 15.4(2)t (+1)

References

http://www.securityfocus.com/bid/103556
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin
http://www.securityfocus.com/bid/103556
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0179

Get alerted when CVE-2018-0179 or the next vulnerability affects your stack