Vulnerabilities > CVE-2018-0282 - Unspecified vulnerability in Cisco IOS and IOS XE

CVSS 6.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

high complexity

cisco

nessus

NVD

Published: 2019-01-10

Updated: 2020-08-28

Summary

A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state. While this vulnerability potentially affects all TCP applications, the only affected application observed so far is the HTTP server. An attacker could exploit this vulnerability by sending specific HTTP requests at a sustained rate to a reachable IP address of the affected software. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition on an affected device.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS 15.2\(2\)E4 Cisco IOS XE -	2
Hardware	Cisco Cisco Catalyst 2960 Plus 24Lc L - Cisco Catalyst 2960 Plus 24Lc S - Cisco Catalyst 2960 Plus 24Pc L - Cisco Catalyst 2960 Plus 24Pc S - Cisco Catalyst 2960 Plus 24Tc L - Cisco Catalyst 2960 Plus 24Tc S - Cisco Catalyst 2960 Plus 48Pst L - Cisco Catalyst 2960 Plus 48Pst S - Cisco Catalyst 2960 Plus 48Tc L - Cisco Catalyst 2960 Plus 48Tc S - Cisco Catalyst 2960C 12Pc L - Cisco Catalyst 2960C 8PC L - Cisco Catalyst 2960C 8TC L - Cisco Catalyst 2960C 8TC S - Cisco Catalyst 2960Cg 8TC L - Cisco Catalyst 2960Cpd 8PT L - Cisco Catalyst 2960Cpd 8TT L - Cisco Catalyst 2960S 24Pd L - Cisco Catalyst 2960S 24Ps L - Cisco Catalyst 2960S 24Td L - Cisco Catalyst 2960S 24Ts L - Cisco Catalyst 2960S 48Fpd L - Cisco Catalyst 2960S 48Fps L - Cisco Catalyst 2960S 48Lpd L - Cisco Catalyst 2960S 48Lps L - Cisco Catalyst 2960S 48Td L - Cisco Catalyst 2960S 48Ts L - Cisco Catalyst 2960S 48Ts S - Cisco Catalyst 2960S F24Ps L - Cisco Catalyst 2960S F24Ts L - Cisco Catalyst 2960S F24Ts S - Cisco Catalyst 2960S F48Fps L - Cisco Catalyst 2960S F48Lps L - Cisco Catalyst 2960S F48Ts L - Cisco Catalyst 2960S F48Ts S - Cisco Catalyst 2960X 24Pd L - Cisco Catalyst 2960X 24Ps L * Cisco Catalyst 2960X 24Psq L - Cisco Catalyst 2960X 24Td L - Cisco Catalyst 2960X 24Ts L - Cisco Catalyst 2960X 24Ts LL - Cisco Catalyst 2960X 48Fpd L - Cisco Catalyst 2960X 48Fps L - Cisco Catalyst 2960X 48Lpd L - Cisco Catalyst 2960X 48Lps L - Cisco Catalyst 2960X 48Td L - Cisco Catalyst 2960X 48Ts L - Cisco Catalyst 2960X 48Ts LL - Cisco Catalyst 2960Xr 24Pd I - Cisco Catalyst 2960Xr 24Ps I - Cisco Catalyst 2960Xr 24Td I - Cisco Catalyst 2960Xr 24Ts I - Cisco Catalyst 2960Xr 48Fpd I - Cisco Catalyst 2960Xr 48Fps I - Cisco Catalyst 2960Xr 48Lpd I - Cisco Catalyst 2960Xr 48Lps I - Cisco Catalyst 2960Xr 48Td I - Cisco Catalyst 2960Xr 48Ts I - Cisco Catalyst 3560C 12Pc S - Cisco Catalyst 3560C 8PC S - Cisco Catalyst 3560Cg 8PC S - Cisco Catalyst 3560Cg 8TC S * Cisco Catalyst 3560Cpd 8PT S - Cisco Catalyst 3560X 24P E - Cisco Catalyst 3560X 24P L - Cisco Catalyst 3560X 24P S - Cisco Catalyst 3560X 24T E - Cisco Catalyst 3560X 24T L - Cisco Catalyst 3560X 24T S - Cisco Catalyst 3560X 24U E - Cisco Catalyst 3560X 24U L - Cisco Catalyst 3560X 24U S - Cisco Catalyst 3560X 48P E - Cisco Catalyst 3560X 48P L - Cisco Catalyst 3560X 48P S - Cisco Catalyst 3560X 48Pf E - Cisco Catalyst 3560X 48Pf L - Cisco Catalyst 3560X 48Pf S - Cisco Catalyst 3560X 48T E - Cisco Catalyst 3560X 48T L - Cisco Catalyst 3560X 48T S - Cisco Catalyst 3560X 48U E - Cisco Catalyst 3560X 48U L - Cisco Catalyst 3560X 48U S * Cisco Catalyst 3750X 12S E - Cisco Catalyst 3750X 12S S - Cisco Catalyst 3750X 24P E - Cisco Catalyst 3750X 24P L - Cisco Catalyst 3750X 24P S - Cisco Catalyst 3750X 24S E - Cisco Catalyst 3750X 24S S - Cisco Catalyst 3750X 24T E - Cisco Catalyst 3750X 24T L - Cisco Catalyst 3750X 24T S - Cisco Catalyst 3750X 24U E - Cisco Catalyst 3750X 24U L - Cisco Catalyst 3750X 24U S - Cisco Catalyst 3750X 48P E - Cisco Catalyst 3750X 48P L - Cisco Catalyst 3750X 48P S - Cisco Catalyst 3750X 48Pf E - Cisco Catalyst 3750X 48Pf L - Cisco Catalyst 3750X 48Pf S - Cisco Catalyst 3750X 48T E - Cisco Catalyst 3750X 48T L - Cisco Catalyst 3750X 48T S - Cisco Catalyst 3750X 48U E - Cisco Catalyst 3750X 48U L - Cisco Catalyst 3750X 48U S - Cisco Catalyst 4500 Supervisor Engine 6 E - Cisco Catalyst 4500 Supervisor Engine 6L E - Cisco Catalyst 4900M - Cisco Catalyst 4948E - Cisco Catalyst 4948E F - Cisco Embedded Service 2020 24Tc CON - Cisco Embedded Service 2020 24Tc CON B - Cisco Embedded Service 2020 24Tc NCP - Cisco Embedded Service 2020 24Tc NCP B - Cisco Embedded Service 2020 CON - Cisco Embedded Service 2020 CON B - Cisco Embedded Service 2020 NCP - Cisco Embedded Service 2020 NCP B - Cisco IE 3010 16S 8PC - Cisco IE 3010 24Tc - Cisco IE 2000 16Ptc G - Cisco IE 2000 16T67 - Cisco IE 2000 16T67P - Cisco IE 2000 16Tc - Cisco IE 2000 16Tc G - Cisco IE 2000 16Tc G E - Cisco IE 2000 16Tc G N - Cisco IE 2000 16Tc G X - Cisco IE 2000 24T67 - Cisco IE 2000 4S TS G - Cisco IE 2000 4T - Cisco IE 2000 4T G - Cisco IE 2000 4TS - Cisco IE 2000 4TS G - Cisco IE 2000 8T67 - Cisco IE 2000 8T67P - Cisco IE 2000 8TC - Cisco IE 2000 8TC G - Cisco IE 2000 8TC G E - Cisco IE 2000 8TC G N - Cisco IE 3000 4TC - Cisco IE 3000 8TC - Cisco SM X Layer 2/3 Etherswitch Service Module -	147

Nessus

NASL family	CISCO
NASL id	CISCO-SA-20190109-TCP.NASL
description	According to its self-reported version, Cisco IOS XE Software is affected by following vulnerability - A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state. While this vulnerability potentially affects all TCP applications, the only affected application observed so far is the HTTP server. An attacker could exploit this vulnerability by sending specific HTTP requests at a sustained rate to a reachable IP address of the affected software. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition on an affected device. (CVE-2018-0282) Please see the included Cisco BIDs and Cisco Security Advisory for more information
last seen	2020-05-09
modified	2019-04-05
plugin id	123789
published	2019-04-05
reporter	This script is Copyright (C) 2019-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/123789
title	Cisco IOS XE Software TCP Denial of Service Vulnerability

Summary

Vulnerable Configurations

Nessus

References