CVE-2018-0472CWE-20

Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability

published October 5, 2018

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

A vulnerability in the IPsec driver code of multiple Cisco IOS XE Software platforms and the Cisco ASA 5500-X Series Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to improper processing of malformed IPsec Authentication Header (AH) or Encapsulating Security Payload (ESP) packets. An attacker could exploit this vulnerability by sending malformed IPsec packets to be processed by an affected device. An exploit could allow the attacker to cause a reload of the affected device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16221 · 96.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-10-05T14:00Z
EPSS history
Timeline
  • 05 OCT 14:00Z
    Cisco IOS XE Software and Cisco ASA 5500-X Series Adaptive Security Appliance IPsec Denial of Service Vulnerability
    cvelistv5