CVE-2018-0282

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-0282
A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control block (TCB) state. While this vulnerability potentially affects all TCP applications, the only affected application observed so far is the HTTP server. An attacker could exploit this vulnerability by sending specific HTTP requests at a sustained rate to a reachable IP address of the affected software. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition on an affected device.

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

7.1 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability : 8.6 / Impact : 6.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References
Link Resource
http://www.securityfocus.com/bid/106510 Third Party Advisory VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-tcp Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:cisco:ios:15.2\(2\)e4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:*
OR cpe:2.3:h:cisco:catalyst_2960-plus_24lc-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960-plus_24lc-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960-plus_24pc-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960-plus_24pc-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960-plus_24tc-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960-plus_24tc-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960-plus_48pst-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960-plus_48pst-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960-plus_48tc-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960-plus_48tc-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960c-12pc-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960c-8pc-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960c-8tc-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960c-8tc-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960cg-8tc-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960cpd-8pt-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960cpd-8tt-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-24pd-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-24ps-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-24td-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-24ts-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-48fpd-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-48fps-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-48lpd-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-48lps-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-48td-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-48ts-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-48ts-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-f24ps-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-f24ts-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-f24ts-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-f48fps-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-f48lps-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-f48ts-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960s-f48ts-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960x-24pd-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960x-24ps-l:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960x-24psq-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960x-24td-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960x-24ts-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960x-24ts-ll:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960x-48fpd-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960x-48fps-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960x-48lpd-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960x-48lps-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960x-48td-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960x-48ts-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960x-48ts-ll:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960xr-24pd-i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960xr-24ps-i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960xr-24td-i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960xr-24ts-i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960xr-48fpd-i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960xr-48fps-i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960xr-48lpd-i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960xr-48lps-i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960xr-48td-i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_2960xr-48ts-i:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560c-12pc-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560c-8pc-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560cg-8pc-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560cg-8tc-s:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560cpd-8pt-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-24p-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-24p-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-24p-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-24t-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-24t-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-24t-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-24u-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-24u-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-24u-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-48p-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-48p-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-48p-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-48pf-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-48pf-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-48pf-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-48t-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-48t-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-48t-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-48u-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-48u-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3560x-48u-s:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-12s-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-12s-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-24p-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-24p-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-24p-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-24s-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-24s-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-24t-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-24t-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-24t-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-24u-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-24u-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-24u-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-48p-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-48p-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-48p-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-48pf-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-48pf-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-48pf-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-48t-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-48t-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-48t-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-48u-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-48u-l:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_3750x-48u-s:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4500_supervisor_engine_6-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4500_supervisor_engine_6l-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4900m:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4948e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:catalyst_4948e-f:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:embedded_service_2020_24tc_con:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:embedded_service_2020_24tc_con_b:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:embedded_service_2020_24tc_ncp:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:embedded_service_2020_24tc_ncp_b:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:embedded_service_2020_con:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:embedded_service_2020_con_b:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:embedded_service_2020_ncp:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:embedded_service_2020_ncp_b:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie-3010-16s-8pc:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie-3010-24tc:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-16ptc-g:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-16t67:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-16t67p:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-16tc:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-16tc-g:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-16tc-g-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-16tc-g-n:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-16tc-g-x:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-24t67:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-4s-ts-g:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-4t:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-4t-g:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-4ts:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-4ts-g:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-8t67:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-8t67p:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-8tc:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-8tc-g:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-8tc-g-e:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_2000-8tc-g-n:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_3000-4tc:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ie_3000-8tc:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:sm-x_layer_2\/3_etherswitch_service_module:-:*:*:*:*:*:*:*
History

No history.

Information

Published : 2019-01-10 00:29

Updated : 2023-12-10 12:44

NVD link : CVE-2018-0282

Mitre link : CVE-2018-0282

CVE.ORG link : CVE-2018-0282

JSON object : View

Products Affected

cisco

  • catalyst_4948e
  • ie_2000-16tc-g-e
  • catalyst_3560cg-8tc-s
  • catalyst_3560x-48u-e
  • catalyst_3750x-24t-s
  • catalyst_3750x-24u-e
  • catalyst_3750x-48p-e
  • ie_2000-8t67p
  • sm-x_layer_2\/3_etherswitch_service_module
  • catalyst_2960-plus_24lc-s
  • catalyst_3750x-24u-s
  • embedded_service_2020_24tc_con_b
  • embedded_service_2020_ncp
  • ie_2000-4ts-g
  • catalyst_2960cpd-8pt-l
  • ie_2000-4t-g
  • catalyst_2960x-48lpd-l
  • catalyst_2960s-24pd-l
  • catalyst_3560cg-8pc-s
  • catalyst_2960s-48fpd-l
  • ie-3010-24tc
  • embedded_service_2020_24tc_ncp
  • ie_2000-16ptc-g
  • catalyst_3750x-48t-e
  • catalyst_2960s-48ts-l
  • catalyst_3560x-48t-l
  • catalyst_2960s-24td-l
  • catalyst_3750x-48u-s
  • catalyst_3750x-48p-l
  • ie_2000-4t
  • catalyst_2960-plus_48tc-s
  • catalyst_2960s-f24ts-s
  • catalyst_3560x-24u-e
  • catalyst_3560x-24u-s
  • catalyst_2960cg-8tc-l
  • catalyst_3560x-48u-l
  • catalyst_3750x-24u-l
  • catalyst_3560c-12pc-s
  • ie_2000-8t67
  • catalyst_2960s-24ts-l
  • ie_2000-16tc-g-x
  • catalyst_2960xr-48fpd-i
  • catalyst_3560x-24t-e
  • ie_2000-4ts
  • catalyst_2960x-48ts-ll
  • catalyst_3560x-48t-e
  • embedded_service_2020_ncp_b
  • catalyst_2960-plus_48pst-s
  • catalyst_3750x-12s-e
  • ie_2000-8tc-g-n
  • catalyst_4500_supervisor_engine_6l-e
  • catalyst_2960x-48ts-l
  • catalyst_3560x-48u-s
  • catalyst_3750x-12s-s
  • embedded_service_2020_24tc_ncp_b
  • catalyst_2960xr-48lps-i
  • catalyst_3560x-24p-l
  • catalyst_2960s-f48ts-l
  • catalyst_2960x-24td-l
  • ie_2000-16tc-g
  • catalyst_3750x-48pf-e
  • catalyst_2960xr-24td-i
  • ios
  • catalyst_2960xr-24ts-i
  • catalyst_3560x-24t-l
  • embedded_service_2020_con
  • catalyst_2960-plus_24pc-l
  • catalyst_2960x-24ps-l
  • catalyst_3560x-48pf-s
  • catalyst_4948e-f
  • ie_2000-24t67
  • catalyst_2960xr-24ps-i
  • catalyst_3750x-24p-e
  • catalyst_2960s-48lpd-l
  • catalyst_3560x-24u-l
  • catalyst_2960x-48lps-l
  • catalyst_2960x-24ts-ll
  • catalyst_3560x-48p-l
  • ie_2000-16t67
  • catalyst_2960c-8tc-s
  • catalyst_3750x-24s-e
  • catalyst_3750x-48t-s
  • ie_2000-16tc
  • catalyst_2960xr-48lpd-i
  • ie_2000-8tc-g-e
  • catalyst_2960cpd-8tt-l
  • catalyst_2960-plus_24tc-l
  • catalyst_2960x-48td-l
  • catalyst_2960-plus_24pc-s
  • catalyst_2960s-f24ts-l
  • catalyst_2960-plus_24lc-l
  • catalyst_2960c-12pc-l
  • catalyst_3560cpd-8pt-s
  • catalyst_3750x-24t-l
  • catalyst_2960-plus_48pst-l
  • ie_2000-8tc-g
  • ie_2000-16tc-g-n
  • catalyst_3750x-48t-l
  • catalyst_3560x-48p-s
  • ios_xe
  • catalyst_2960xr-24pd-i
  • catalyst_3750x-24p-l
  • catalyst_3560x-24t-s
  • catalyst_3750x-48u-e
  • catalyst_2960xr-48td-i
  • catalyst_2960s-48td-l
  • catalyst_2960x-48fpd-l
  • embedded_service_2020_24tc_con
  • ie-3010-16s-8pc
  • catalyst_2960s-f24ps-l
  • catalyst_2960s-48fps-l
  • catalyst_3750x-24s-s
  • catalyst_4500_supervisor_engine_6-e
  • catalyst_3560x-24p-e
  • catalyst_2960s-48ts-s
  • catalyst_2960x-24psq-l
  • catalyst_3750x-24p-s
  • catalyst_4900m
  • catalyst_3750x-48pf-l
  • catalyst_3560c-8pc-s
  • catalyst_3750x-24t-e
  • catalyst_2960xr-48ts-i
  • catalyst_3560x-48pf-l
  • catalyst_2960-plus_24tc-s
  • catalyst_3750x-48u-l
  • embedded_service_2020_con_b
  • catalyst_2960-plus_48tc-l
  • catalyst_3560x-24p-s
  • ie_2000-16t67p
  • catalyst_2960x-24ts-l
  • catalyst_2960s-48lps-l
  • catalyst_2960x-24pd-l
  • catalyst_2960xr-48fps-i
  • catalyst_3750x-48pf-s
  • ie_2000-8tc
  • catalyst_2960s-f48fps-l
  • catalyst_3560x-48t-s
  • ie_3000-8tc
  • catalyst_2960c-8pc-l
  • ie_2000-4s-ts-g
  • catalyst_3750x-48p-s
  • catalyst_2960s-24ps-l
  • catalyst_2960c-8tc-l
  • catalyst_2960x-48fps-l
  • catalyst_2960s-f48ts-s
  • catalyst_3560x-48pf-e
  • catalyst_3560x-48p-e
  • ie_3000-4tc
  • catalyst_2960s-f48lps-l
CWE
NVD-CWE-noinfo CWE-371

State Issues