Action not permitted
Modal body text goes here.
cve-2018-0467
Vulnerability from cvelistv5
Published
2018-10-05 14:00
Modified
2024-09-16 19:37
Severity ?
EPSS score ?
Summary
Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability
References
Impacted products
| ▼ | Vendor | Product |
|---|---|---|
| Cisco | Cisco IOS Software |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:28:10.991Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20180926 Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability",
"tags": [
"vendor-advisory",
"x_refsource_CISCO",
"x_transferred"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh"
},
{
"name": "1041737",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1041737"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Cisco IOS Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2018-09-26T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-04-12T19:07:41",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "20180926 Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability",
"tags": [
"vendor-advisory",
"x_refsource_CISCO"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh"
},
{
"name": "1041737",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://www.securitytracker.com/id/1041737"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03"
}
],
"source": {
"advisory": "cisco-sa-20180926-ipv6hbh",
"defect": [
[
"CSCuz28570"
]
],
"discovery": "UNKNOWN"
},
"title": "Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@cisco.com",
"DATE_PUBLIC": "2018-09-26T16:00:00-0500",
"ID": "CVE-2018-0467",
"STATE": "PUBLIC",
"TITLE": "Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Cisco IOS Software",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "Cisco"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device."
}
]
},
"impact": {
"cvss": {
"baseScore": "8.6",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-20"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20180926 Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability",
"refsource": "CISCO",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh"
},
{
"name": "1041737",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1041737"
},
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03"
}
]
},
"source": {
"advisory": "cisco-sa-20180926-ipv6hbh",
"defect": [
[
"CSCuz28570"
]
],
"discovery": "UNKNOWN"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2018-0467",
"datePublished": "2018-10-05T14:00:00Z",
"dateReserved": "2017-11-27T00:00:00",
"dateUpdated": "2024-09-16T19:37:05.388Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2018-0467\",\"sourceIdentifier\":\"ykramarz@cisco.com\",\"published\":\"2018-10-05T14:29:04.590\",\"lastModified\":\"2019-04-15T12:31:08.757\",\"vulnStatus\":\"Modified\",\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en el c\u00f3digo de procesamiento IPv6 en Cisco IOS y Cisco IOS XE Software podr\u00eda permitir que un atacante remoto sin autenticar haga que el dispositivo se reinicie. La vulnerabilidad se debe a una gesti\u00f3n incorrecta de determinadas opciones hop-by-hop IPv6. Un atacante podr\u00eda explotar esta vulnerabilidad enviando un paquete IPv6 malicioso a o a trav\u00e9s del dispositivo afectado. Si se explota con \u00e9xito, podr\u00eda permitir que el atacante consiga que el dispositivo se recargue, provocando una denegaci\u00f3n de servicio (DoS) en un dispositivo afectado.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":4.0}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:N/A:C\",\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"COMPLETE\",\"baseScore\":7.8},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":10.0,\"impactScore\":6.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]},{\"source\":\"ykramarz@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:15.6\\\\(2\\\\)sp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"65B22948-0DA9-4E13-8C00-2FD738247DD3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F821EBD7-91E2-4460-BFAF-18482CF6CB8C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:everest-16.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0695D994-4AAE-4B3B-9A2A-68AE884D1586\"}]}]}],\"references\":[{\"url\":\"http://www.securitytracker.com/id/1041737\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03\",\"source\":\"ykramarz@cisco.com\"},{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh\",\"source\":\"ykramarz@cisco.com\",\"tags\":[\"Vendor Advisory\"]}]}}"
}
}
icsa-19-094-03
Vulnerability from csaf_cisa
Published
2019-04-04 00:00
Modified
2019-04-04 00:00
Summary
Rockwell Automation Stratix 5400/5410/5700/8000/8300 and ArmorStratix 5700
Notes
CISA Disclaimer
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
Legal Notice
All information products included in https://us-cert.cisa.gov/ics are provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.
Risk evaluation
Successful exploitation of these vulnerabilities could result in a denial-of-service condition or time synchronization issues across the network via reloading the device, a buffer overflow, or memory exhaustion.
Critical infrastructure sectors
Critical Manufacturing, Energy, Water and Wastewater Systems
Countries/areas deployed
Worldwide
Company headquarters location
United States
Recommended Practices
NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.
Recommended Practices
NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.
Recommended Practices
Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.
Exploitability
No known public exploits specifically target these vulnerabilities.
{
"document": {
"acknowledgments": [
{
"organization": "Rockwell Automation",
"summary": "reporting these vulnerabilities to NCCIC"
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited",
"tlp": {
"label": "WHITE",
"url": "https://us-cert.cisa.gov/tlp/"
}
},
"lang": "en-US",
"notes": [
{
"category": "general",
"text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
"title": "CISA Disclaimer"
},
{
"category": "legal_disclaimer",
"text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
"title": "Legal Notice"
},
{
"category": "summary",
"text": "Successful exploitation of these vulnerabilities could result in a denial-of-service condition or time synchronization issues across the network via reloading the device, a buffer overflow, or memory exhaustion.",
"title": "Risk evaluation"
},
{
"category": "other",
"text": "Critical Manufacturing, Energy, Water and Wastewater Systems",
"title": "Critical infrastructure sectors"
},
{
"category": "other",
"text": "Worldwide",
"title": "Countries/areas deployed"
},
{
"category": "other",
"text": "United States",
"title": "Company headquarters location"
},
{
"category": "general",
"text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
"title": "Recommended Practices"
},
{
"category": "general",
"text": "Additional mitigation guidance and recommended practices are publicly available on the ICS-CERT website in the Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.",
"title": "Recommended Practices"
},
{
"category": "other",
"text": "No known public exploits specifically target these vulnerabilities.",
"title": "Exploitability"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
"name": "CISA",
"namespace": "https://www.cisa.gov/"
},
"references": [
{
"category": "self",
"summary": "ICS Advisory ICSA-19-094-03 JSON",
"url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2019/icsa-19-094-03.json"
},
{
"category": "self",
"summary": "ICS Advisory ICSA-19-094-03 Web Version",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-094-03"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-19-094-03"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
},
{
"category": "external",
"summary": "Recommended Practices",
"url": "https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B"
}
],
"title": "Rockwell Automation Stratix 5400/5410/5700/8000/8300 and ArmorStratix 5700",
"tracking": {
"current_release_date": "2019-04-04T00:00:00.000000Z",
"generator": {
"engine": {
"name": "CISA CSAF Generator",
"version": "1.0.0"
}
},
"id": "ICSA-19-094-03",
"initial_release_date": "2019-04-04T00:00:00.000000Z",
"revision_history": [
{
"date": "2019-04-04T00:00:00.000000Z",
"legacy_version": "Initial",
"number": "1",
"summary": "ICSA-19-094-03 Rockwell Automation Stratix 5400/5410/5700/8000/8300 and ArmorStratix 5700"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c 15.2(4)EA7",
"product": {
"name": "Allen-Bradley Stratix 8300: All versions prior to 15.2(4)EA7",
"product_id": "CSAFPID-0001"
}
}
],
"category": "product_name",
"name": "Allen-Bradley Stratix 8300"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c= 15.2(6)E0a",
"product": {
"name": "Allen-Bradley Stratix 5400: All versions 15.2(6)E0a and prior",
"product_id": "CSAFPID-0002"
}
}
],
"category": "product_name",
"name": "Allen-Bradley Stratix 5400"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c= 15.2(6)E0a",
"product": {
"name": "Allen-Bradley Stratix 5700: All versions 15.2(6)E0a and prior",
"product_id": "CSAFPID-0003"
}
}
],
"category": "product_name",
"name": "Allen-Bradley Stratix 5700"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c= 15.2(6)E0a",
"product": {
"name": "Allen-Bradley Stratix 8000: All versions 15.2(6)E0a and prior",
"product_id": "CSAFPID-0004"
}
}
],
"category": "product_name",
"name": "Allen-Bradley Stratix 8000"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c= 15.2(6)E0a",
"product": {
"name": "Allen-Bradley Stratix 5410: All versions 15.2(6)E0a and prior",
"product_id": "CSAFPID-0005"
}
}
],
"category": "product_name",
"name": "Allen-Bradley Stratix 5410"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c= 15.2(6)E0a",
"product": {
"name": "Allen-Bradley ArmorStratix 5700: All versions 15.2(6)E0a and prior",
"product_id": "CSAFPID-0006"
}
}
],
"category": "product_name",
"name": "Allen-Bradley ArmorStratix 5700"
}
],
"category": "vendor",
"name": "Rockwell Automation"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-0466",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Sending a specially crafted open shortest path first version 3 (OSPFv3) packet could allow an unauthenticated, adjacent attacker to cause an affected device to reload, resulting in a denial-of-service condition.CVE-2018-0466 has been assigned to this vulnerability. A CVSS v3 base score of 7.4 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0466"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5400",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5410",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5700",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "vendor_fix",
"details": "FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 8000",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(4)EA7: Allen-Bradley Stratix 8300",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Updates can be found and downloaded ",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
},
{
"category": "mitigation",
"details": "Utilize proper network infrastructure controls, such as firewalls, to help ensure that requests from unauthorized sources are blocked and the controls are isolated from the business network.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Consult the product documentation for specific features, such as access control lists and deep pack inspection, which may be used to block unauthorized changes, etc.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "When remote access is required, use secure methods, such as virtual private networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "For additional information, see Rockwell Automation\u0027s security advisory",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1082687"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
}
]
},
{
"cve": "CVE-2018-0470",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "Sending a malformed HTTP packet in the web framework of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a buffer overflow condition on an affected device, resulting in a denial-of-service condition.CVE-2018-0470 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0470"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5400",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5410",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5700",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "vendor_fix",
"details": "FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 8000",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(4)EA7: Allen-Bradley Stratix 8300",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Updates can be found and downloaded ",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
},
{
"category": "mitigation",
"details": "Utilize proper network infrastructure controls, such as firewalls, to help ensure that requests from unauthorized sources are blocked and the controls are isolated from the business network.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Consult the product documentation for specific features, such as access control lists and deep pack inspection, which may be used to block unauthorized changes, etc.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "When remote access is required, use secure methods, such as virtual private networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "For additional information, see Rockwell Automation\u0027s security advisory",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1082687"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
}
]
},
{
"cve": "CVE-2018-0473",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Sending a custom precision time protocol (PTP) packet to or through an affected device could allow an unauthenticated remote attacker to cause a denial-of-service condition of PTP, which may result in time synchronization issues across the network.CVE-2018-0473 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0473"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5400",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5410",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5700",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "vendor_fix",
"details": "FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 8000",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(4)EA7: Allen-Bradley Stratix 8300",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Updates can be found and downloaded ",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
},
{
"category": "mitigation",
"details": "Utilize proper network infrastructure controls, such as firewalls, to help ensure that requests from unauthorized sources are blocked and the controls are isolated from the business network.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Consult the product documentation for specific features, such as access control lists and deep pack inspection, which may be used to block unauthorized changes, etc.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "When remote access is required, use secure methods, such as virtual private networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "For additional information, see Rockwell Automation\u0027s security advisory",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1082687"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
}
]
},
{
"cve": "CVE-2018-0467",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Sending a malicious IPv6 packet to or through the affected device could allow an unauthenticated, remote attacker to cause the device to reload, resulting in a denial-of-service condition.CVE-2018-0467 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0467"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5400",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5410",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5700",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "vendor_fix",
"details": "FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 8000",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(4)EA7: Allen-Bradley Stratix 8300",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Updates can be found and downloaded ",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
},
{
"category": "mitigation",
"details": "Utilize proper network infrastructure controls, such as firewalls, to help ensure that requests from unauthorized sources are blocked and the controls are isolated from the business network.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Consult the product documentation for specific features, such as access control lists and deep pack inspection, which may be used to block unauthorized changes, etc.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "When remote access is required, use secure methods, such as virtual private networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "For additional information, see Rockwell Automation\u0027s security advisory",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1082687"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
}
]
},
{
"cve": "CVE-2018-15373",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "Sending a high rate of Cisco discovery protocol packets to an affected device could allow an unauthenticated, adjacent attacker to exhaust memory on an affected device, resulting in a denial-of-service condition.CVE-2018-15373 has been assigned to this vulnerability. A CVSS v3 base score of 7.4 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
"title": "Vulnerability Summary"
}
],
"product_status": {
"known_affected": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
"references": [
{
"category": "external",
"summary": "web.nvd.nist.gov",
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-15373"
},
{
"category": "external",
"summary": "www.first.org",
"url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
}
],
"remediations": [
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5400",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5410",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 5700",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "vendor_fix",
"details": "FRN 15.2(6)E2a: Allen-Bradley ArmorStratix 5700",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(6)E2a: Allen-Bradley Stratix 8000",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "FRN 15.2(4)EA7: Allen-Bradley Stratix 8300",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Updates can be found and downloaded ",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
},
{
"category": "mitigation",
"details": "Utilize proper network infrastructure controls, such as firewalls, to help ensure that requests from unauthorized sources are blocked and the controls are isolated from the business network.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Consult the product documentation for specific features, such as access control lists and deep pack inspection, which may be used to block unauthorized changes, etc.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "Block all traffic to EtherNet/IP, or other CIP protocol-based devices, from outside the manufacturing zone by blocking or restricting access to TCP and UDP Port 2222 and Port 44818 using proper network infrastructure controls, such as firewalls, UTM devices, or other security appliances. For more information on TCP/UDP ports used by Rockwell Automation Products, see Knowledgebase Article ID 898270 (Login required).",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "When remote access is required, use secure methods, such as virtual private networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
},
{
"category": "mitigation",
"details": "For additional information, see Rockwell Automation\u0027s security advisory",
"product_ids": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
],
"url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1082687"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-0001",
"CSAFPID-0002",
"CSAFPID-0003",
"CSAFPID-0004",
"CSAFPID-0005",
"CSAFPID-0006"
]
}
]
}
]
}
gsd-2018-0467
Vulnerability from gsd
Modified
2023-12-13 01:22
Details
A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2018-0467",
"description": "A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device.",
"id": "GSD-2018-0467"
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2018-0467"
],
"details": "A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device.",
"id": "GSD-2018-0467",
"modified": "2023-12-13T01:22:24.581103Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "psirt@cisco.com",
"DATE_PUBLIC": "2018-09-26T16:00:00-0500",
"ID": "CVE-2018-0467",
"STATE": "PUBLIC",
"TITLE": "Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Cisco IOS Software",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "Cisco"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device."
}
]
},
"impact": {
"cvss": {
"baseScore": "8.6",
"version": "3.0"
}
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-20"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20180926 Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability",
"refsource": "CISCO",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh"
},
{
"name": "1041737",
"refsource": "SECTRACK",
"url": "http://www.securitytracker.com/id/1041737"
},
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03",
"refsource": "MISC",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03"
}
]
},
"source": {
"advisory": "cisco-sa-20180926-ipv6hbh",
"defect": [
[
"CSCuz28570"
]
],
"discovery": "UNKNOWN"
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:cisco:ios_xe:everest-16.6.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:cisco:ios_xe:15.6\\(2\\)sp:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "psirt@cisco.com",
"ID": "CVE-2018-0467"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20180926 Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability",
"refsource": "CISCO",
"tags": [
"Vendor Advisory"
],
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh"
},
{
"name": "1041737",
"refsource": "SECTRACK",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1041737"
},
{
"name": "https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03",
"refsource": "MISC",
"tags": [],
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03"
}
]
}
},
"impact": {
"baseMetricV2": {
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 6.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0
}
},
"lastModifiedDate": "2019-04-15T12:31Z",
"publishedDate": "2018-10-05T14:29Z"
}
}
}
var-201810-0340
Vulnerability from variot
A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device. Cisco IOS XE The software contains an input validation vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. Cisco IOS Software and IOSXE Software are operating systems developed by Cisco for its network devices
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201810-0340",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "ios xe",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "16.6.1"
},
{
"model": "ios xe",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "15.6\\(2\\)sp"
},
{
"model": "ios xe",
"scope": "eq",
"trust": 1.6,
"vendor": "cisco",
"version": "everest-16.6.1"
},
{
"model": "ios xe",
"scope": null,
"trust": 0.8,
"vendor": "cisco",
"version": null
},
{
"model": "ios software",
"scope": null,
"trust": 0.6,
"vendor": "cisco",
"version": null
},
{
"model": "ios xe software",
"scope": null,
"trust": 0.6,
"vendor": "cisco",
"version": null
},
{
"model": "asr series route processor",
"scope": "eq",
"trust": 0.6,
"vendor": "cisco",
"version": "10000"
},
{
"model": "automation allen-bradley stratix",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "83000"
},
{
"model": "automation allen-bradley stratix 15.2 e0a",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "8000"
},
{
"model": "automation allen-bradley stratix 15.2 ea.fc4",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "8000"
},
{
"model": "automation allen-bradley stratix 15.2 e0a",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "5700"
},
{
"model": "automation allen-bradley stratix 15.2 ea.fc4",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "5700"
},
{
"model": "automation allen-bradley stratix 15.2 e0a",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "5410"
},
{
"model": "automation allen-bradley stratix 15.2 ea.fc4",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "5410"
},
{
"model": "automation allen-bradley stratix 15.2 ea3",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "5410"
},
{
"model": "automation allen-bradley stratix 15.2 eb",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "5410"
},
{
"model": "automation allen-bradley stratix 15.2 e0a",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "5400"
},
{
"model": "automation allen-bradley stratix 15.2 ea.fc4",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "5400"
},
{
"model": "automation allen-bradley stratix 15.2 ea3",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "5400"
},
{
"model": "automation allen-bradley stratix 15.2 ea2",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "5400"
},
{
"model": "automation allen-bradley stratix 15.2 ea1",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "5400"
},
{
"model": "automation allen-bradley armorstratix 15.2 e0a",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "5700"
},
{
"model": "automation allen-bradley armorstratix 15.2 ea.fc4",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwell",
"version": "5700"
},
{
"model": "automation allen-bradley stratix 15.2 ea3",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwall",
"version": "8000"
},
{
"model": "automation allen-bradley stratix 15.2 ea3",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwall",
"version": "5700"
},
{
"model": "automation allen-bradley armorstratix 15.2 ea3",
"scope": "eq",
"trust": 0.3,
"vendor": "rockwall",
"version": "5700"
},
{
"model": "ncs",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "42160"
},
{
"model": "ncs",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "42060"
},
{
"model": "ncs",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "42020"
},
{
"model": "ncs",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "42010"
},
{
"model": "me 3800x-24fs-m switch router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "me 3600x-24ts-m switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "me 3600x-24fs-m switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "me 3600x-24cx-m switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "ios xe software",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "ios",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "cloud services router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "1000v0"
},
{
"model": "catalyst c3850-12x48u-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst c3850-12x48u-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst c3850-12x48u-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48xs-f-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48xs-f-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48xs-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48u-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48u-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48u-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48t-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48t-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48t-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48p-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48p-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48p-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48f-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48f-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-48f-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-32xs-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-32xs-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24xu-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24xu-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24xu-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24xs-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24xs-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24u-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24u-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24u-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24t-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24t-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24t-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24s-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24s-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24p-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24p-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-24p-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-16xs-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-16xs-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-12xs-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-12xs-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-12s-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3850-12s-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-8x24uq-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-8x24uq-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-8x24uq-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-8x24pd-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-8x24pd-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-8x24pd-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48ts-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48ts-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48ts-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48tq-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48tq-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48tq-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48td-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48td-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48td-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48ps-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48ps-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48ps-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48pq-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48pq-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48pq-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48pd-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48pd-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48pd-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48fs-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48fs-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48fs-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48fqm-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48fqm-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48fqm-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48fq-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48fq-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48fq-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48fd-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48fd-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-48fd-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24ts-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24ts-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24ts-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24td-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24td-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24td-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24ps-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24ps-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24ps-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24pdm-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24pdm-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24pdm-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24pd-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24pd-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-24pd-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-12x48uz-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-12x48uz-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-12x48uz-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-12x48ur-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-12x48ur-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-12x48ur-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-12x48uq-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-12x48uq-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-12x48uq-e switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-12x48fd-s switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "catalyst 3650-12x48fd-l switch",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 920-4sz-d router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 920-4sz-a router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 920-24tz-m router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 920-24sz-m router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 920-24sz-im router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 920-12sz-im router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 920-12cz-d router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 920-12cz-a router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 920-10sz-pd router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9030"
},
{
"model": "asr router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "9020"
},
{
"model": "asr 901s-4sg-f-d router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901s-3sg-f-d router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901s-3sg-f-ah router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901s-2sg-f-d router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901s-2sg-f-ah router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901-6cz-ft-d router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901-6cz-ft-a router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901-6cz-fs-d router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901-6cz-fs-a router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901-6cz-f-d router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901-6cz-f-a router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901-4c-ft-d router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901-4c-f-d router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901-12c-ft-d router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr 901-12c-f-d router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr route switch processor",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "90030"
},
{
"model": "asr route switch processor",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "90020"
},
{
"model": "asr router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "1002-x0"
},
{
"model": "asr 1002-hx router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "asr router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "1001-x0"
},
{
"model": "asr 1001-hx router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "0"
},
{
"model": "integrated services router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "4451-x0"
},
{
"model": "integrated services router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "44510"
},
{
"model": "integrated services router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "44310"
},
{
"model": "integrated services router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "43510"
},
{
"model": "integrated services router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "43310"
},
{
"model": "integrated services router",
"scope": "eq",
"trust": 0.3,
"vendor": "cisco",
"version": "43210"
},
{
"model": "automation allen-bradley stratix 15.2 ea7",
"scope": "ne",
"trust": 0.3,
"vendor": "rockwell",
"version": "8300"
},
{
"model": "automation allen-bradley stratix 15.2 e2a",
"scope": "ne",
"trust": 0.3,
"vendor": "rockwell",
"version": "8000"
},
{
"model": "automation allen-bradley stratix 15.2 e2a",
"scope": "ne",
"trust": 0.3,
"vendor": "rockwell",
"version": "5700"
},
{
"model": "automation allen-bradley stratix 15.2 e2a",
"scope": "ne",
"trust": 0.3,
"vendor": "rockwell",
"version": "5410"
},
{
"model": "automation allen-bradley stratix 15.2 e2a",
"scope": "ne",
"trust": 0.3,
"vendor": "rockwell",
"version": "5400"
},
{
"model": "automation allen-bradley armorstratix 15.2 e2a",
"scope": "ne",
"trust": 0.3,
"vendor": "rockwell",
"version": "5700"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-20261"
},
{
"db": "BID",
"id": "107779"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-010842"
},
{
"db": "NVD",
"id": "CVE-2018-0467"
},
{
"db": "CNNVD",
"id": "CNNVD-201809-1256"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:cisco:ios_xe:everest-16.6.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:cisco:ios_xe:15.6\\(2\\)sp:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2018-0467"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Rockwell Automation reported these vulnerabilities to NCCIC.",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201809-1256"
}
],
"trust": 0.6
},
"cve": "CVE-2018-0467",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"impactScore": 6.9,
"integrityImpact": "NONE",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": false,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 7.8,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2018-0467",
"impactScore": null,
"integrityImpact": "None",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.9,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "CNVD-2018-20261",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 7.8,
"confidentialityImpact": "NONE",
"exploitabilityScore": 10.0,
"id": "VHN-118669",
"impactScore": 6.9,
"integrityImpact": "NONE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:N/I:N/A:C",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"exploitabilityScore": 3.9,
"impactScore": 4.0,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"trust": 1.0,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "High",
"baseScore": 8.6,
"baseSeverity": "High",
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2018-0467",
"impactScore": null,
"integrityImpact": "None",
"privilegesRequired": "None",
"scope": "Changed",
"trust": 0.8,
"userInteraction": "None",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2018-0467",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNVD",
"id": "CNVD-2018-20261",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201809-1256",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "VULHUB",
"id": "VHN-118669",
"trust": 0.1,
"value": "HIGH"
},
{
"author": "VULMON",
"id": "CVE-2018-0467",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-20261"
},
{
"db": "VULHUB",
"id": "VHN-118669"
},
{
"db": "VULMON",
"id": "CVE-2018-0467"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-010842"
},
{
"db": "NVD",
"id": "CVE-2018-0467"
},
{
"db": "CNNVD",
"id": "CNNVD-201809-1256"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device. Cisco IOS XE The software contains an input validation vulnerability.Service operation interruption (DoS) There is a possibility of being put into a state. Cisco IOS Software and IOSXE Software are operating systems developed by Cisco for its network devices",
"sources": [
{
"db": "NVD",
"id": "CVE-2018-0467"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-010842"
},
{
"db": "CNVD",
"id": "CNVD-2018-20261"
},
{
"db": "BID",
"id": "107779"
},
{
"db": "VULHUB",
"id": "VHN-118669"
},
{
"db": "VULMON",
"id": "CVE-2018-0467"
}
],
"trust": 2.61
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2018-0467",
"trust": 3.5
},
{
"db": "ICS CERT",
"id": "ICSA-19-094-03",
"trust": 2.9
},
{
"db": "SECTRACK",
"id": "1041737",
"trust": 1.8
},
{
"db": "JVNDB",
"id": "JVNDB-2018-010842",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201809-1256",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2018-20261",
"trust": 0.6
},
{
"db": "ICS CERT",
"id": "ICSA-19-094-02",
"trust": 0.6
},
{
"db": "AUSCERT",
"id": "ESB-2019.1153",
"trust": 0.6
},
{
"db": "BID",
"id": "107779",
"trust": 0.3
},
{
"db": "VULHUB",
"id": "VHN-118669",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2018-0467",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-20261"
},
{
"db": "VULHUB",
"id": "VHN-118669"
},
{
"db": "VULMON",
"id": "CVE-2018-0467"
},
{
"db": "BID",
"id": "107779"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-010842"
},
{
"db": "NVD",
"id": "CVE-2018-0467"
},
{
"db": "CNNVD",
"id": "CNNVD-201809-1256"
}
]
},
"id": "VAR-201810-0340",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-20261"
},
{
"db": "VULHUB",
"id": "VHN-118669"
}
],
"trust": 1.30968815
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-20261"
}
]
},
"last_update_date": "2023-12-18T12:01:09.988000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "cisco-sa-20180926-ipv6hbh",
"trust": 0.8,
"url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20180926-ipv6hbh"
},
{
"title": "Patch for CiscoIOS and IOSXESoftwareIPv6Hop-by-HopOptions Denial of Service Vulnerabilities",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchinfo/show/141465"
},
{
"title": "Cisco IOS Software and IOS XE Software Enter the fix for the verification vulnerability",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=85265"
},
{
"title": "Cisco: Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability",
"trust": 0.1,
"url": "https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts\u0026qid=cisco-sa-20180926-ipv6hbh"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-20261"
},
{
"db": "VULMON",
"id": "CVE-2018-0467"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-010842"
},
{
"db": "CNNVD",
"id": "CNNVD-201809-1256"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-20",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-118669"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-010842"
},
{
"db": "NVD",
"id": "CVE-2018-0467"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.6,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-19-094-03"
},
{
"trust": 2.7,
"url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20180926-ipv6hbh"
},
{
"trust": 1.8,
"url": "http://www.securitytracker.com/id/1041737"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-0467"
},
{
"trust": 0.8,
"url": "https://nvd.nist.gov/vuln/detail/cve-2018-0467"
},
{
"trust": 0.6,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-19-094-02"
},
{
"trust": 0.6,
"url": "https://www.auscert.org.au/bulletins/78478"
},
{
"trust": 0.3,
"url": "http://www.cisco.com/"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/20.html"
},
{
"trust": 0.1,
"url": "https://www.rapid7.com/db/vulnerabilities/cisco-ios-cve-2018-0467"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/150461"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2018-20261"
},
{
"db": "VULHUB",
"id": "VHN-118669"
},
{
"db": "VULMON",
"id": "CVE-2018-0467"
},
{
"db": "BID",
"id": "107779"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-010842"
},
{
"db": "NVD",
"id": "CVE-2018-0467"
},
{
"db": "CNNVD",
"id": "CNNVD-201809-1256"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2018-20261"
},
{
"db": "VULHUB",
"id": "VHN-118669"
},
{
"db": "VULMON",
"id": "CVE-2018-0467"
},
{
"db": "BID",
"id": "107779"
},
{
"db": "JVNDB",
"id": "JVNDB-2018-010842"
},
{
"db": "NVD",
"id": "CVE-2018-0467"
},
{
"db": "CNNVD",
"id": "CNNVD-201809-1256"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-09-30T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-20261"
},
{
"date": "2018-10-05T00:00:00",
"db": "VULHUB",
"id": "VHN-118669"
},
{
"date": "2018-10-05T00:00:00",
"db": "VULMON",
"id": "CVE-2018-0467"
},
{
"date": "2018-09-26T00:00:00",
"db": "BID",
"id": "107779"
},
{
"date": "2018-12-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-010842"
},
{
"date": "2018-10-05T14:29:04.590000",
"db": "NVD",
"id": "CVE-2018-0467"
},
{
"date": "2018-09-28T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201809-1256"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-09-30T00:00:00",
"db": "CNVD",
"id": "CNVD-2018-20261"
},
{
"date": "2019-04-15T00:00:00",
"db": "VULHUB",
"id": "VHN-118669"
},
{
"date": "2019-04-15T00:00:00",
"db": "VULMON",
"id": "CVE-2018-0467"
},
{
"date": "2018-09-26T00:00:00",
"db": "BID",
"id": "107779"
},
{
"date": "2019-04-10T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2018-010842"
},
{
"date": "2019-04-15T12:31:08.757000",
"db": "NVD",
"id": "CVE-2018-0467"
},
{
"date": "2019-04-19T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201809-1256"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201809-1256"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Cisco IOS XE Software input validation vulnerability",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2018-010842"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Input Validation Error",
"sources": [
{
"db": "BID",
"id": "107779"
},
{
"db": "CNNVD",
"id": "CNNVD-201809-1256"
}
],
"trust": 0.9
}
}
cisco-sa-20180926-ipv6hbh
Vulnerability from csaf_cisco
Published
2018-09-26 16:00
Modified
2018-09-26 16:00
Summary
Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability
Notes
Summary
A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload.
The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh"]
This advisory is part of the September 26, 2018, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 12 Cisco Security Advisories that describe 13 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: September 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-69981"].
Vulnerable Products
This vulnerability affects devices that are running a vulnerable version of Cisco IOS or IOS XE Software and are configured with an IPv6 address.
For more information about which Cisco IOS and IOS XE Software releases are vulnerable, see the Fixed Software ["#fixed"] section of this advisory.
Administrators can identify interfaces that have assigned IPv6 addresses by using the show ipv6 interface brief command in the CLI. The following example shows the output of the command on a device with IPv6 enabled:
router#show ipv6 interface brief
. . . GigabitEthernet0/0/0 [Up/Up] fe80::212:daff:fe62:c150 2001:DB8::1
If IPv6 is not supported by the software release that is running on a device, using the show ipv6 interface brief command produces an error message. If IPv6 is not enabled on the device, using the show ipv6 interface brief command does not show any interfaces with IPv6 addresses. In either scenario, the device is not affected by this vulnerability.
Determining the Cisco IOS Software Release
To determine which Cisco IOS Software release is running on a device, administrators can log in to the device, use the show version command in the CLI, and then refer to the system banner that appears. If the device is running Cisco IOS Software, the system banner displays text similar to Cisco Internetwork Operating System Software or Cisco IOS Software. The banner also displays the installed image name in parentheses, followed by the Cisco IOS Software release number and release name. Some Cisco devices do not support the show version command or may provide different output.
The following example shows the output of the command for a device that is running Cisco IOS Software Release 15.5(2)T1 and has an installed image name of C2951-UNIVERSALK9-M:
Router> show version
Cisco IOS Software, C2951 Software (C2951-UNIVERSALK9-M), Version 15.5(2)T1, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2015 by Cisco Systems, Inc. Compiled Mon 22-Jun-15 09:32 by prod_rel_team . . .
For information about the naming and numbering conventions for Cisco IOS Software releases, see the Cisco IOS and NX-OS Software Reference Guide ["https://www.cisco.com/c/en/us/about/security-center/ios-nx-os-reference-guide.html"].
Determining the Cisco IOS XE Software Release
To determine which Cisco IOS XE Software release is running on a device, administrators can log in to the device, use the show version command in the CLI, and then refer to the system banner that appears. If the device is running Cisco IOS XE Software, the system banner displays Cisco IOS Software, Cisco IOS XE Software, or similar text.
The following example shows the output of the command for a device that is running Cisco IOS XE Software Release 16.2.1 and has an installed image name of CAT3K_CAA-UNIVERSALK9-M:
ios-xe-device# show version
Cisco IOS Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version Denali 16.2.1, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2016 by Cisco Systems, Inc. Compiled Sun 27-Mar-16 21:47 by mcpre . . .
For information about the naming and numbering conventions for Cisco IOS XE Software releases, see the Cisco IOS and NX-OS Software Reference Guide ["https://www.cisco.com/c/en/us/about/security-center/ios-nx-os-reference-guide.html"].
Products Confirmed Not Vulnerable
Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by this vulnerability.
Cisco has confirmed that this vulnerability does not affect Cisco IOS XR Software or Cisco NX-OS Software.
Workarounds
There are no workarounds that address this vulnerability.
Fixed Software
Cisco has released free software updates that address the vulnerability described in this advisory. Customers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:
https://www.cisco.com/c/en/us/products/end-user-license-agreement.html ["https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"]
Additionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades.
When considering software upgrades, customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories and Alerts page ["https://www.cisco.com/go/psirt"], to determine exposure and a complete upgrade solution.
In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.
Customers Without Service Contracts
Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC:
https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"]
Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.
Cisco IOS and IOS XE Software
To help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides a tool, the Cisco IOS Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"], that identifies any Cisco Security Advisories that impact a specific software release and the earliest release that fixes the vulnerabilities described in each advisory (“First Fixed”). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities described in all the advisories identified (“Combined First Fixed”).
Customers can use this tool to perform the following tasks:
Initiate a search by choosing one or more releases from a drop-down list or uploading a file from a local system for the tool to parse
Enter the output of the show version command for the tool to parse
Create a custom search by including all previously published Cisco Security Advisories, a specific advisory, or all advisories in the most recent bundled publication
To determine whether a release is affected by any published Cisco Security Advisory, use the Cisco IOS Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"] on Cisco.com or enter a Cisco IOS Software or Cisco IOS XE Software release—for example, 15.1(4)M2 or 3.13.8S—in the following field:
By default, the Cisco IOS Software Checker includes results only for vulnerabilities that have a Critical or High Security Impact Rating (SIR). To include results for Medium SIR vulnerabilities, use the Cisco IOS Software Checker on Cisco.com and check the Medium check box in the Impact Rating drop-down list.
For a mapping of Cisco IOS XE Software releases to Cisco IOS Software releases, refer to the Cisco IOS XE 2 Release Notes ["https://www.cisco.com/c/en/us/td/docs/ios/ios_xe/2/release/notes/rnasr21/rnasr21_gen.html#wp3000032"], Cisco IOS XE 3S Release Notes ["https://www.cisco.com/c/en/us/td/docs/ios/ios_xe/3/release/notes/asr1k_rn_3s_rel_notes/asr1k_rn_3s_sys_req.html#wp3069754"], or Cisco IOS XE 3SG Release Notes ["https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/release/note/OL_24726.html#pgfId-2570252"], depending on the Cisco IOS XE Software release.
Vulnerability Policy
To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.
Exploitation and Public Announcements
The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.
Source
This vulnerability was found during internal security testing.
Legal Disclaimer
THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.
A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.
{
"document": {
"acknowledgments": [
{
"summary": "This vulnerability was found during internal security testing."
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"notes": [
{
"category": "summary",
"text": "A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload.\r\n\r\nThe vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device.\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nThis advisory is available at the following link:\r\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh [\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh\"]\r\n This advisory is part of the September 26, 2018, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 12 Cisco Security Advisories that describe 13 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: September 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [\"https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-69981\"].",
"title": "Summary"
},
{
"category": "general",
"text": "This vulnerability affects devices that are running a vulnerable version of Cisco IOS or IOS XE Software and are configured with an IPv6 address.\r\n\r\nFor more information about which Cisco IOS and IOS XE Software releases are vulnerable, see the Fixed Software [\"#fixed\"] section of this advisory.\r\n\r\nAdministrators can identify interfaces that have assigned IPv6 addresses by using the show ipv6 interface brief command in the CLI. The following example shows the output of the command on a device with IPv6 enabled:\r\nrouter#show ipv6 interface brief\r\n. . . GigabitEthernet0/0/0 [Up/Up] fe80::212:daff:fe62:c150 2001:DB8::1\r\n\r\nIf IPv6 is not supported by the software release that is running on a device, using the show ipv6 interface brief command produces an error message. If IPv6 is not enabled on the device, using the show ipv6 interface brief command does not show any interfaces with IPv6 addresses. In either scenario, the device is not affected by this vulnerability.\r\n Determining the Cisco IOS Software Release\r\nTo determine which Cisco IOS Software release is running on a device, administrators can log in to the device, use the show version command in the CLI, and then refer to the system banner that appears. If the device is running Cisco IOS Software, the system banner displays text similar to Cisco Internetwork Operating System Software or Cisco IOS Software. The banner also displays the installed image name in parentheses, followed by the Cisco IOS Software release number and release name. Some Cisco devices do not support the show version command or may provide different output.\r\n\r\nThe following example shows the output of the command for a device that is running Cisco IOS Software Release 15.5(2)T1 and has an installed image name of C2951-UNIVERSALK9-M:\r\n\r\n\r\nRouter\u003e show version\r\n Cisco IOS Software, C2951 Software (C2951-UNIVERSALK9-M), Version 15.5(2)T1, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2015 by Cisco Systems, Inc. Compiled Mon 22-Jun-15 09:32 by prod_rel_team . . .\r\n\r\nFor information about the naming and numbering conventions for Cisco IOS Software releases, see the Cisco IOS and NX-OS Software Reference Guide [\"https://www.cisco.com/c/en/us/about/security-center/ios-nx-os-reference-guide.html\"].\r\n Determining the Cisco IOS XE Software Release\r\nTo determine which Cisco IOS XE Software release is running on a device, administrators can log in to the device, use the show version command in the CLI, and then refer to the system banner that appears. If the device is running Cisco IOS XE Software, the system banner displays Cisco IOS Software, Cisco IOS XE Software, or similar text.\r\n\r\nThe following example shows the output of the command for a device that is running Cisco IOS XE Software Release 16.2.1 and has an installed image name of CAT3K_CAA-UNIVERSALK9-M:\r\n\r\n\r\nios-xe-device# show version\r\n Cisco IOS Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version Denali 16.2.1, RELEASE SOFTWARE (fc1) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2016 by Cisco Systems, Inc. Compiled Sun 27-Mar-16 21:47 by mcpre . . .\r\n\r\nFor information about the naming and numbering conventions for Cisco IOS XE Software releases, see the Cisco IOS and NX-OS Software Reference Guide [\"https://www.cisco.com/c/en/us/about/security-center/ios-nx-os-reference-guide.html\"].",
"title": "Vulnerable Products"
},
{
"category": "general",
"text": "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by this vulnerability.\r\n\r\nCisco has confirmed that this vulnerability does not affect Cisco IOS XR Software or Cisco NX-OS Software.",
"title": "Products Confirmed Not Vulnerable"
},
{
"category": "general",
"text": "There are no workarounds that address this vulnerability.",
"title": "Workarounds"
},
{
"category": "general",
"text": "Cisco has released free software updates that address the vulnerability described in this advisory. Customers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:\r\nhttps://www.cisco.com/c/en/us/products/end-user-license-agreement.html [\"https://www.cisco.com/c/en/us/products/end-user-license-agreement.html\"]\r\n\r\nAdditionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades.\r\n\r\nWhen considering software upgrades, customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories and Alerts page [\"https://www.cisco.com/go/psirt\"], to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.\r\n\r\nCustomers Without Service Contracts\r\n\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC:\r\nhttps://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]\r\n\r\nCustomers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n Cisco IOS and IOS XE Software\r\nTo help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides a tool, the Cisco IOS Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"], that identifies any Cisco Security Advisories that impact a specific software release and the earliest release that fixes the vulnerabilities described in each advisory (\u201cFirst Fixed\u201d). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities described in all the advisories identified (\u201cCombined First Fixed\u201d).\r\n\r\nCustomers can use this tool to perform the following tasks:\r\n\r\nInitiate a search by choosing one or more releases from a drop-down list or uploading a file from a local system for the tool to parse\r\nEnter the output of the show version command for the tool to parse\r\nCreate a custom search by including all previously published Cisco Security Advisories, a specific advisory, or all advisories in the most recent bundled publication\r\n\r\nTo determine whether a release is affected by any published Cisco Security Advisory, use the Cisco IOS Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"] on Cisco.com or enter a Cisco IOS Software or Cisco IOS XE Software release\u2014for example, 15.1(4)M2 or 3.13.8S\u2014in the following field:\r\n\r\n\r\n\r\nBy default, the Cisco IOS Software Checker includes results only for vulnerabilities that have a Critical or High Security Impact Rating (SIR). To include results for Medium SIR vulnerabilities, use the Cisco IOS Software Checker on Cisco.com and check the Medium check box in the Impact Rating drop-down list.\r\n\r\nFor a mapping of Cisco IOS XE Software releases to Cisco IOS Software releases, refer to the Cisco IOS XE 2 Release Notes [\"https://www.cisco.com/c/en/us/td/docs/ios/ios_xe/2/release/notes/rnasr21/rnasr21_gen.html#wp3000032\"], Cisco IOS XE 3S Release Notes [\"https://www.cisco.com/c/en/us/td/docs/ios/ios_xe/3/release/notes/asr1k_rn_3s_rel_notes/asr1k_rn_3s_sys_req.html#wp3069754\"], or Cisco IOS XE 3SG Release Notes [\"https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/release/note/OL_24726.html#pgfId-2570252\"], depending on the Cisco IOS XE Software release.",
"title": "Fixed Software"
},
{
"category": "general",
"text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
"title": "Vulnerability Policy"
},
{
"category": "general",
"text": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
"title": "Exploitation and Public Announcements"
},
{
"category": "general",
"text": "This vulnerability was found during internal security testing.",
"title": "Source"
},
{
"category": "legal_disclaimer",
"text": "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.",
"title": "Legal Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "Emergency Support:\r\n+1 877 228 7302 (toll-free within North America)\r\n+1 408 525 6532 (International direct-dial)\r\nNon-emergency Support:\r\nEmail: psirt@cisco.com\r\nSupport requests that are received via e-mail are typically acknowledged within 48 hours.",
"issuing_authority": "Cisco product security incident response is the responsibility of the Cisco Product Security Incident Response Team (PSIRT). The Cisco PSIRT is a dedicated, global team that manages the receipt, investigation, and public reporting of security vulnerability information that is related to Cisco products and networks. The on-call Cisco PSIRT works 24x7 with Cisco customers, independent security researchers, consultants, industry organizations, and other vendors to identify possible security issues with Cisco products and networks.\r\nMore information can be found in Cisco Security Vulnerability Policy available at https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html",
"name": "Cisco",
"namespace": "https://wwww.cisco.com"
},
"references": [
{
"category": "self",
"summary": "Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh"
},
{
"category": "external",
"summary": "Cisco Event Response: September 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication",
"url": "https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-69981"
},
{
"category": "external",
"summary": "Cisco Security Vulnerability Policy",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
},
{
"category": "external",
"summary": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh"
},
{
"category": "external",
"summary": "Cisco Event Response: September 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication",
"url": "https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-69981"
},
{
"category": "external",
"summary": "Cisco IOS and NX-OS Software Reference Guide",
"url": "https://www.cisco.com/c/en/us/about/security-center/ios-nx-os-reference-guide.html"
},
{
"category": "external",
"summary": "Cisco IOS and NX-OS Software Reference Guide",
"url": "https://www.cisco.com/c/en/us/about/security-center/ios-nx-os-reference-guide.html"
},
{
"category": "external",
"summary": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html",
"url": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"
},
{
"category": "external",
"summary": "Cisco Security Advisories and Alerts page",
"url": "https://www.cisco.com/go/psirt"
},
{
"category": "external",
"summary": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html",
"url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"
},
{
"category": "external",
"summary": "Cisco\u0026nbsp;IOS Software Checker",
"url": "https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"
},
{
"category": "external",
"summary": "Cisco\u0026nbsp;IOS Software Checker",
"url": "https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"
},
{
"category": "external",
"summary": "Cisco\u0026nbsp;IOS XE 2 Release Notes",
"url": "https://www.cisco.com/c/en/us/td/docs/ios/ios_xe/2/release/notes/rnasr21/rnasr21_gen.html#wp3000032"
},
{
"category": "external",
"summary": "Cisco\u0026nbsp;IOS XE 3S Release Notes",
"url": "https://www.cisco.com/c/en/us/td/docs/ios/ios_xe/3/release/notes/asr1k_rn_3s_rel_notes/asr1k_rn_3s_sys_req.html#wp3069754"
},
{
"category": "external",
"summary": "Cisco\u0026nbsp;IOS XE 3SG Release Notes",
"url": "https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/release/note/OL_24726.html#pgfId-2570252"
},
{
"category": "external",
"summary": "Security Vulnerability Policy",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
}
],
"title": "Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability",
"tracking": {
"current_release_date": "2018-09-26T16:00:00+00:00",
"generator": {
"date": "2022-09-03T03:01:33+00:00",
"engine": {
"name": "TVCE"
}
},
"id": "cisco-sa-20180926-ipv6hbh",
"initial_release_date": "2018-09-26T16:00:00+00:00",
"revision_history": [
{
"date": "2018-09-26T14:58:34+00:00",
"number": "1.0.0",
"summary": "Initial public release."
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "service_pack",
"name": "15.3(3)S",
"product": {
"name": "15.3(3)S",
"product_id": "CSAFPID-117783"
}
},
{
"category": "service_pack",
"name": "15.3(3)S1",
"product": {
"name": "15.3(3)S1",
"product_id": "CSAFPID-193406"
}
},
{
"category": "service_pack",
"name": "15.3(3)S2",
"product": {
"name": "15.3(3)S2",
"product_id": "CSAFPID-193407"
}
},
{
"category": "service_pack",
"name": "15.3(3)S3",
"product": {
"name": "15.3(3)S3",
"product_id": "CSAFPID-193408"
}
},
{
"category": "service_pack",
"name": "15.3(3)S6",
"product": {
"name": "15.3(3)S6",
"product_id": "CSAFPID-193409"
}
},
{
"category": "service_pack",
"name": "15.3(3)S4",
"product": {
"name": "15.3(3)S4",
"product_id": "CSAFPID-194877"
}
},
{
"category": "service_pack",
"name": "15.3(3)S1a",
"product": {
"name": "15.3(3)S1a",
"product_id": "CSAFPID-197457"
}
},
{
"category": "service_pack",
"name": "15.3(3)S5",
"product": {
"name": "15.3(3)S5",
"product_id": "CSAFPID-197469"
}
},
{
"category": "service_pack",
"name": "15.3(3)S7",
"product": {
"name": "15.3(3)S7",
"product_id": "CSAFPID-209093"
}
},
{
"category": "service_pack",
"name": "15.3(3)S8",
"product": {
"name": "15.3(3)S8",
"product_id": "CSAFPID-209268"
}
},
{
"category": "service_pack",
"name": "15.3(3)S9",
"product": {
"name": "15.3(3)S9",
"product_id": "CSAFPID-213032"
}
},
{
"category": "service_pack",
"name": "15.3(3)S8a",
"product": {
"name": "15.3(3)S8a",
"product_id": "CSAFPID-220673"
}
}
],
"category": "product_version",
"name": "15.3S"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.2(3)E",
"product": {
"name": "15.2(3)E",
"product_id": "CSAFPID-197483"
}
},
{
"category": "service_pack",
"name": "15.2(4)E",
"product": {
"name": "15.2(4)E",
"product_id": "CSAFPID-204108"
}
},
{
"category": "service_pack",
"name": "15.2(3)E1",
"product": {
"name": "15.2(3)E1",
"product_id": "CSAFPID-204186"
}
},
{
"category": "service_pack",
"name": "15.2(3)E2",
"product": {
"name": "15.2(3)E2",
"product_id": "CSAFPID-209046"
}
},
{
"category": "service_pack",
"name": "15.2(3a)E",
"product": {
"name": "15.2(3a)E",
"product_id": "CSAFPID-209047"
}
},
{
"category": "service_pack",
"name": "15.2(3)E3",
"product": {
"name": "15.2(3)E3",
"product_id": "CSAFPID-209358"
}
},
{
"category": "service_pack",
"name": "15.2(4)E1",
"product": {
"name": "15.2(4)E1",
"product_id": "CSAFPID-209887"
}
},
{
"category": "service_pack",
"name": "15.2(4)E2",
"product": {
"name": "15.2(4)E2",
"product_id": "CSAFPID-213610"
}
},
{
"category": "service_pack",
"name": "15.2(4m)E1",
"product": {
"name": "15.2(4m)E1",
"product_id": "CSAFPID-214072"
}
},
{
"category": "service_pack",
"name": "15.2(3)E4",
"product": {
"name": "15.2(3)E4",
"product_id": "CSAFPID-214078"
}
},
{
"category": "service_pack",
"name": "15.2(5)E",
"product": {
"name": "15.2(5)E",
"product_id": "CSAFPID-214556"
}
},
{
"category": "service_pack",
"name": "15.2(4)E3",
"product": {
"name": "15.2(4)E3",
"product_id": "CSAFPID-217805"
}
},
{
"category": "service_pack",
"name": "15.2(5)E1",
"product": {
"name": "15.2(5)E1",
"product_id": "CSAFPID-220441"
}
},
{
"category": "service_pack",
"name": "15.2(5b)E",
"product": {
"name": "15.2(5b)E",
"product_id": "CSAFPID-220457"
}
},
{
"category": "service_pack",
"name": "15.2(4m)E3",
"product": {
"name": "15.2(4m)E3",
"product_id": "CSAFPID-220664"
}
},
{
"category": "service_pack",
"name": "15.2(3)E5",
"product": {
"name": "15.2(3)E5",
"product_id": "CSAFPID-222275"
}
},
{
"category": "service_pack",
"name": "15.2(4n)E2",
"product": {
"name": "15.2(4n)E2",
"product_id": "CSAFPID-222500"
}
},
{
"category": "service_pack",
"name": "15.2(4o)E2",
"product": {
"name": "15.2(4o)E2",
"product_id": "CSAFPID-222924"
}
},
{
"category": "service_pack",
"name": "15.2(4)E4",
"product": {
"name": "15.2(4)E4",
"product_id": "CSAFPID-224553"
}
},
{
"category": "service_pack",
"name": "15.2(5)E2",
"product": {
"name": "15.2(5)E2",
"product_id": "CSAFPID-225740"
}
},
{
"category": "service_pack",
"name": "15.2(4p)E1",
"product": {
"name": "15.2(4p)E1",
"product_id": "CSAFPID-226077"
}
},
{
"category": "service_pack",
"name": "15.2(5)E2b",
"product": {
"name": "15.2(5)E2b",
"product_id": "CSAFPID-227754"
}
},
{
"category": "service_pack",
"name": "15.2(4m)E2",
"product": {
"name": "15.2(4m)E2",
"product_id": "CSAFPID-230588"
}
},
{
"category": "service_pack",
"name": "15.2(4o)E3",
"product": {
"name": "15.2(4o)E3",
"product_id": "CSAFPID-230589"
}
},
{
"category": "service_pack",
"name": "15.2(4q)E1",
"product": {
"name": "15.2(4q)E1",
"product_id": "CSAFPID-230590"
}
},
{
"category": "service_pack",
"name": "15.2(4s)E1",
"product": {
"name": "15.2(4s)E1",
"product_id": "CSAFPID-241916"
}
},
{
"category": "service_pack",
"name": "15.2(4s)E2",
"product": {
"name": "15.2(4s)E2",
"product_id": "CSAFPID-250628"
}
}
],
"category": "product_version",
"name": "15.2E"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.4(2)S",
"product": {
"name": "15.4(2)S",
"product_id": "CSAFPID-190980"
}
},
{
"category": "service_pack",
"name": "15.4(3)S",
"product": {
"name": "15.4(3)S",
"product_id": "CSAFPID-193544"
}
},
{
"category": "service_pack",
"name": "15.4(2)S1",
"product": {
"name": "15.4(2)S1",
"product_id": "CSAFPID-200485"
}
},
{
"category": "service_pack",
"name": "15.4(3)S1",
"product": {
"name": "15.4(3)S1",
"product_id": "CSAFPID-201595"
}
},
{
"category": "service_pack",
"name": "15.4(2)S2",
"product": {
"name": "15.4(2)S2",
"product_id": "CSAFPID-204105"
}
},
{
"category": "service_pack",
"name": "15.4(3)S2",
"product": {
"name": "15.4(3)S2",
"product_id": "CSAFPID-204106"
}
},
{
"category": "service_pack",
"name": "15.4(3)S3",
"product": {
"name": "15.4(3)S3",
"product_id": "CSAFPID-205670"
}
},
{
"category": "service_pack",
"name": "15.4(2)S3",
"product": {
"name": "15.4(2)S3",
"product_id": "CSAFPID-209096"
}
},
{
"category": "service_pack",
"name": "15.4(2)S4",
"product": {
"name": "15.4(2)S4",
"product_id": "CSAFPID-209097"
}
},
{
"category": "service_pack",
"name": "15.4(3)S4",
"product": {
"name": "15.4(3)S4",
"product_id": "CSAFPID-209099"
}
},
{
"category": "service_pack",
"name": "15.4(3)S5",
"product": {
"name": "15.4(3)S5",
"product_id": "CSAFPID-211297"
}
},
{
"category": "service_pack",
"name": "15.4(3)S6",
"product": {
"name": "15.4(3)S6",
"product_id": "CSAFPID-213794"
}
},
{
"category": "service_pack",
"name": "15.4(3)S7",
"product": {
"name": "15.4(3)S7",
"product_id": "CSAFPID-220445"
}
},
{
"category": "service_pack",
"name": "15.4(3)S6a",
"product": {
"name": "15.4(3)S6a",
"product_id": "CSAFPID-220675"
}
}
],
"category": "product_version",
"name": "15.4S"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.5(1)S",
"product": {
"name": "15.5(1)S",
"product_id": "CSAFPID-196322"
}
},
{
"category": "service_pack",
"name": "15.5(2)S",
"product": {
"name": "15.5(2)S",
"product_id": "CSAFPID-200487"
}
},
{
"category": "service_pack",
"name": "15.5(1)S1",
"product": {
"name": "15.5(1)S1",
"product_id": "CSAFPID-204830"
}
},
{
"category": "service_pack",
"name": "15.5(3)S",
"product": {
"name": "15.5(3)S",
"product_id": "CSAFPID-204901"
}
},
{
"category": "service_pack",
"name": "15.5(1)S2",
"product": {
"name": "15.5(1)S2",
"product_id": "CSAFPID-209102"
}
},
{
"category": "service_pack",
"name": "15.5(1)S3",
"product": {
"name": "15.5(1)S3",
"product_id": "CSAFPID-209103"
}
},
{
"category": "service_pack",
"name": "15.5(2)S1",
"product": {
"name": "15.5(2)S1",
"product_id": "CSAFPID-209104"
}
},
{
"category": "service_pack",
"name": "15.5(2)S2",
"product": {
"name": "15.5(2)S2",
"product_id": "CSAFPID-209105"
}
},
{
"category": "service_pack",
"name": "15.5(3)S1a",
"product": {
"name": "15.5(3)S1a",
"product_id": "CSAFPID-211603"
}
},
{
"category": "service_pack",
"name": "15.5(2)S3",
"product": {
"name": "15.5(2)S3",
"product_id": "CSAFPID-211751"
}
},
{
"category": "service_pack",
"name": "15.5(3)S2",
"product": {
"name": "15.5(3)S2",
"product_id": "CSAFPID-212127"
}
},
{
"category": "service_pack",
"name": "15.5(3)S3",
"product": {
"name": "15.5(3)S3",
"product_id": "CSAFPID-213594"
}
},
{
"category": "service_pack",
"name": "15.5(1)S4",
"product": {
"name": "15.5(1)S4",
"product_id": "CSAFPID-214479"
}
},
{
"category": "service_pack",
"name": "15.5(2)S4",
"product": {
"name": "15.5(2)S4",
"product_id": "CSAFPID-216577"
}
},
{
"category": "service_pack",
"name": "15.5(3)S4",
"product": {
"name": "15.5(3)S4",
"product_id": "CSAFPID-218997"
}
},
{
"category": "service_pack",
"name": "15.5(3)S5",
"product": {
"name": "15.5(3)S5",
"product_id": "CSAFPID-223085"
}
}
],
"category": "product_version",
"name": "15.5S"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.2(3)EA",
"product": {
"name": "15.2(3)EA",
"product_id": "CSAFPID-209051"
}
},
{
"category": "service_pack",
"name": "15.2(4)EA",
"product": {
"name": "15.2(4)EA",
"product_id": "CSAFPID-210203"
}
},
{
"category": "service_pack",
"name": "15.2(4)EA1",
"product": {
"name": "15.2(4)EA1",
"product_id": "CSAFPID-210958"
}
},
{
"category": "service_pack",
"name": "15.2(5)EA",
"product": {
"name": "15.2(5)EA",
"product_id": "CSAFPID-220038"
}
},
{
"category": "service_pack",
"name": "15.2(4)EA5",
"product": {
"name": "15.2(4)EA5",
"product_id": "CSAFPID-222419"
}
}
],
"category": "product_version",
"name": "15.2EA"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.4(2)SN",
"product": {
"name": "15.4(2)SN",
"product_id": "CSAFPID-198309"
}
},
{
"category": "service_pack",
"name": "15.4(2)SN1",
"product": {
"name": "15.4(2)SN1",
"product_id": "CSAFPID-198528"
}
},
{
"category": "service_pack",
"name": "15.4(3)SN1",
"product": {
"name": "15.4(3)SN1",
"product_id": "CSAFPID-204107"
}
},
{
"category": "service_pack",
"name": "15.4(3)SN1a",
"product": {
"name": "15.4(3)SN1a",
"product_id": "CSAFPID-209929"
}
}
],
"category": "product_version",
"name": "15.4SN"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.5(3)M",
"product": {
"name": "15.5(3)M",
"product_id": "CSAFPID-200509"
}
},
{
"category": "service_pack",
"name": "15.5(3)M1",
"product": {
"name": "15.5(3)M1",
"product_id": "CSAFPID-209360"
}
},
{
"category": "service_pack",
"name": "15.5(3)M2",
"product": {
"name": "15.5(3)M2",
"product_id": "CSAFPID-211825"
}
},
{
"category": "service_pack",
"name": "15.5(3)M2a",
"product": {
"name": "15.5(3)M2a",
"product_id": "CSAFPID-213633"
}
},
{
"category": "service_pack",
"name": "15.5(3)M3",
"product": {
"name": "15.5(3)M3",
"product_id": "CSAFPID-213789"
}
},
{
"category": "service_pack",
"name": "15.5(3)M4",
"product": {
"name": "15.5(3)M4",
"product_id": "CSAFPID-218996"
}
},
{
"category": "service_pack",
"name": "15.5(3)M4a",
"product": {
"name": "15.5(3)M4a",
"product_id": "CSAFPID-221093"
}
},
{
"category": "service_pack",
"name": "15.5(3)M5",
"product": {
"name": "15.5(3)M5",
"product_id": "CSAFPID-222988"
}
},
{
"category": "service_pack",
"name": "15.5(3)M4b",
"product": {
"name": "15.5(3)M4b",
"product_id": "CSAFPID-222989"
}
},
{
"category": "service_pack",
"name": "15.5(3)M4c",
"product": {
"name": "15.5(3)M4c",
"product_id": "CSAFPID-223189"
}
}
],
"category": "product_version",
"name": "15.5M"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.5(1)SN",
"product": {
"name": "15.5(1)SN",
"product_id": "CSAFPID-204281"
}
},
{
"category": "service_pack",
"name": "15.5(1)SN1",
"product": {
"name": "15.5(1)SN1",
"product_id": "CSAFPID-209106"
}
},
{
"category": "service_pack",
"name": "15.5(2)SN",
"product": {
"name": "15.5(2)SN",
"product_id": "CSAFPID-209107"
}
},
{
"category": "service_pack",
"name": "15.5(3)SN0a",
"product": {
"name": "15.5(3)SN0a",
"product_id": "CSAFPID-209632"
}
},
{
"category": "service_pack",
"name": "15.5(3)SN",
"product": {
"name": "15.5(3)SN",
"product_id": "CSAFPID-213001"
}
}
],
"category": "product_version",
"name": "15.5SN"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.6(1)S",
"product": {
"name": "15.6(1)S",
"product_id": "CSAFPID-204822"
}
},
{
"category": "service_pack",
"name": "15.6(2)S",
"product": {
"name": "15.6(2)S",
"product_id": "CSAFPID-209113"
}
},
{
"category": "service_pack",
"name": "15.6(2)S1",
"product": {
"name": "15.6(2)S1",
"product_id": "CSAFPID-211984"
}
},
{
"category": "service_pack",
"name": "15.6(1)S1",
"product": {
"name": "15.6(1)S1",
"product_id": "CSAFPID-212407"
}
},
{
"category": "service_pack",
"name": "15.6(1)S2",
"product": {
"name": "15.6(1)S2",
"product_id": "CSAFPID-214161"
}
},
{
"category": "service_pack",
"name": "15.6(2)S2",
"product": {
"name": "15.6(2)S2",
"product_id": "CSAFPID-216961"
}
},
{
"category": "service_pack",
"name": "15.6(1)S3",
"product": {
"name": "15.6(1)S3",
"product_id": "CSAFPID-222931"
}
},
{
"category": "service_pack",
"name": "15.6(2)S3",
"product": {
"name": "15.6(2)S3",
"product_id": "CSAFPID-226076"
}
}
],
"category": "product_version",
"name": "15.6S"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.6(1)T",
"product": {
"name": "15.6(1)T",
"product_id": "CSAFPID-205516"
}
},
{
"category": "service_pack",
"name": "15.6(2)T",
"product": {
"name": "15.6(2)T",
"product_id": "CSAFPID-209115"
}
},
{
"category": "service_pack",
"name": "15.6(1)T0a",
"product": {
"name": "15.6(1)T0a",
"product_id": "CSAFPID-212118"
}
},
{
"category": "service_pack",
"name": "15.6(1)T1",
"product": {
"name": "15.6(1)T1",
"product_id": "CSAFPID-212445"
}
},
{
"category": "service_pack",
"name": "15.6(2)T1",
"product": {
"name": "15.6(2)T1",
"product_id": "CSAFPID-214938"
}
},
{
"category": "service_pack",
"name": "15.6(1)T2",
"product": {
"name": "15.6(1)T2",
"product_id": "CSAFPID-216215"
}
},
{
"category": "service_pack",
"name": "15.6(2)T2",
"product": {
"name": "15.6(2)T2",
"product_id": "CSAFPID-216962"
}
},
{
"category": "service_pack",
"name": "15.6(1)T3",
"product": {
"name": "15.6(1)T3",
"product_id": "CSAFPID-227613"
}
}
],
"category": "product_version",
"name": "15.6T"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.6(2)SP",
"product": {
"name": "15.6(2)SP",
"product_id": "CSAFPID-212321"
}
},
{
"category": "service_pack",
"name": "15.6(2)SP1",
"product": {
"name": "15.6(2)SP1",
"product_id": "CSAFPID-220521"
}
},
{
"category": "service_pack",
"name": "15.6(2)SP2",
"product": {
"name": "15.6(2)SP2",
"product_id": "CSAFPID-224566"
}
}
],
"category": "product_version",
"name": "15.6SP"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.6(1)SN",
"product": {
"name": "15.6(1)SN",
"product_id": "CSAFPID-213034"
}
},
{
"category": "service_pack",
"name": "15.6(1)SN1",
"product": {
"name": "15.6(1)SN1",
"product_id": "CSAFPID-213086"
}
},
{
"category": "service_pack",
"name": "15.6(2)SN",
"product": {
"name": "15.6(2)SN",
"product_id": "CSAFPID-216419"
}
},
{
"category": "service_pack",
"name": "15.6(1)SN2",
"product": {
"name": "15.6(1)SN2",
"product_id": "CSAFPID-230612"
}
},
{
"category": "service_pack",
"name": "15.6(1)SN3",
"product": {
"name": "15.6(1)SN3",
"product_id": "CSAFPID-230613"
}
},
{
"category": "service_pack",
"name": "15.6(3)SN",
"product": {
"name": "15.6(3)SN",
"product_id": "CSAFPID-230614"
}
},
{
"category": "service_pack",
"name": "15.6(4)SN",
"product": {
"name": "15.6(4)SN",
"product_id": "CSAFPID-230616"
}
},
{
"category": "service_pack",
"name": "15.6(5)SN",
"product": {
"name": "15.6(5)SN",
"product_id": "CSAFPID-232093"
}
},
{
"category": "service_pack",
"name": "15.6(6)SN",
"product": {
"name": "15.6(6)SN",
"product_id": "CSAFPID-236297"
}
},
{
"category": "service_pack",
"name": "15.6(7)SN",
"product": {
"name": "15.6(7)SN",
"product_id": "CSAFPID-254081"
}
},
{
"category": "service_pack",
"name": "15.6(7)SN1",
"product": {
"name": "15.6(7)SN1",
"product_id": "CSAFPID-262382"
}
},
{
"category": "service_pack",
"name": "15.6(7)SN2",
"product": {
"name": "15.6(7)SN2",
"product_id": "CSAFPID-275327"
}
},
{
"category": "service_pack",
"name": "15.6(7)SN3",
"product": {
"name": "15.6(7)SN3",
"product_id": "CSAFPID-278136"
}
}
],
"category": "product_version",
"name": "15.6SN"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.6(3)M",
"product": {
"name": "15.6(3)M",
"product_id": "CSAFPID-214074"
}
},
{
"category": "service_pack",
"name": "15.6(3)M1",
"product": {
"name": "15.6(3)M1",
"product_id": "CSAFPID-220396"
}
},
{
"category": "service_pack",
"name": "15.6(3)M0a",
"product": {
"name": "15.6(3)M0a",
"product_id": "CSAFPID-220522"
}
},
{
"category": "service_pack",
"name": "15.6(3)M1a",
"product": {
"name": "15.6(3)M1a",
"product_id": "CSAFPID-224327"
}
},
{
"category": "service_pack",
"name": "15.6(3)M2",
"product": {
"name": "15.6(3)M2",
"product_id": "CSAFPID-225667"
}
},
{
"category": "service_pack",
"name": "15.6(3)M2a",
"product": {
"name": "15.6(3)M2a",
"product_id": "CSAFPID-227172"
}
}
],
"category": "product_version",
"name": "15.6M"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVR10",
"product": {
"name": "15.1(3)SVR10",
"product_id": "CSAFPID-290618"
}
}
],
"category": "product_version",
"name": "15.1SVR"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVS",
"product": {
"name": "15.1(3)SVS",
"product_id": "CSAFPID-277232"
}
}
],
"category": "product_version",
"name": "15.1SVS"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVT1",
"product": {
"name": "15.1(3)SVT1",
"product_id": "CSAFPID-280759"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVT3",
"product": {
"name": "15.1(3)SVT3",
"product_id": "CSAFPID-284785"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVT4",
"product": {
"name": "15.1(3)SVT4",
"product_id": "CSAFPID-286399"
}
}
],
"category": "product_version",
"name": "15.1SVT"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVU1",
"product": {
"name": "15.1(3)SVU1",
"product_id": "CSAFPID-283833"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVU10",
"product": {
"name": "15.1(3)SVU10",
"product_id": "CSAFPID-284291"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVU2",
"product": {
"name": "15.1(3)SVU2",
"product_id": "CSAFPID-284566"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVU11",
"product": {
"name": "15.1(3)SVU11",
"product_id": "CSAFPID-286400"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVU20",
"product": {
"name": "15.1(3)SVU20",
"product_id": "CSAFPID-289270"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVU21",
"product": {
"name": "15.1(3)SVU21",
"product_id": "CSAFPID-290557"
}
}
],
"category": "product_version",
"name": "15.1SVU"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVV1",
"product": {
"name": "15.1(3)SVV1",
"product_id": "CSAFPID-284341"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVV2",
"product": {
"name": "15.1(3)SVV2",
"product_id": "CSAFPID-286029"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVV3",
"product": {
"name": "15.1(3)SVV3",
"product_id": "CSAFPID-286940"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVV4",
"product": {
"name": "15.1(3)SVV4",
"product_id": "CSAFPID-289371"
}
}
],
"category": "product_version",
"name": "15.1SVV"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVW",
"product": {
"name": "15.1(3)SVW",
"product_id": "CSAFPID-286451"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVW1",
"product": {
"name": "15.1(3)SVW1",
"product_id": "CSAFPID-286844"
}
}
],
"category": "product_version",
"name": "15.1SVW"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVX",
"product": {
"name": "15.1(3)SVX",
"product_id": "CSAFPID-286927"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVX1",
"product": {
"name": "15.1(3)SVX1",
"product_id": "CSAFPID-289301"
}
}
],
"category": "product_version",
"name": "15.1SVX"
}
],
"category": "product_family",
"name": "IOS"
},
{
"branches": [
{
"branches": [
{
"category": "service_pack",
"name": "3.12.0S",
"product": {
"name": "3.12.0S",
"product_id": "CSAFPID-200770"
}
},
{
"category": "service_pack",
"name": "3.12.1S",
"product": {
"name": "3.12.1S",
"product_id": "CSAFPID-206161"
}
},
{
"category": "service_pack",
"name": "3.12.2S",
"product": {
"name": "3.12.2S",
"product_id": "CSAFPID-206162"
}
},
{
"category": "service_pack",
"name": "3.12.3S",
"product": {
"name": "3.12.3S",
"product_id": "CSAFPID-206176"
}
},
{
"category": "service_pack",
"name": "3.12.4S",
"product": {
"name": "3.12.4S",
"product_id": "CSAFPID-213474"
}
}
],
"category": "product_version",
"name": "3.12S"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.13.0S",
"product": {
"name": "3.13.0S",
"product_id": "CSAFPID-201495"
}
},
{
"category": "service_pack",
"name": "3.13.1S",
"product": {
"name": "3.13.1S",
"product_id": "CSAFPID-206174"
}
},
{
"category": "service_pack",
"name": "3.13.2S",
"product": {
"name": "3.13.2S",
"product_id": "CSAFPID-206175"
}
},
{
"category": "service_pack",
"name": "3.13.3S",
"product": {
"name": "3.13.3S",
"product_id": "CSAFPID-210078"
}
},
{
"category": "service_pack",
"name": "3.13.4S",
"product": {
"name": "3.13.4S",
"product_id": "CSAFPID-213475"
}
},
{
"category": "service_pack",
"name": "3.13.5S",
"product": {
"name": "3.13.5S",
"product_id": "CSAFPID-213557"
}
},
{
"category": "service_pack",
"name": "3.13.2aS",
"product": {
"name": "3.13.2aS",
"product_id": "CSAFPID-213661"
}
},
{
"category": "service_pack",
"name": "3.13.0aS",
"product": {
"name": "3.13.0aS",
"product_id": "CSAFPID-213781"
}
},
{
"category": "service_pack",
"name": "3.13.5aS",
"product": {
"name": "3.13.5aS",
"product_id": "CSAFPID-217261"
}
},
{
"category": "service_pack",
"name": "3.13.6S",
"product": {
"name": "3.13.6S",
"product_id": "CSAFPID-217262"
}
},
{
"category": "service_pack",
"name": "3.13.7S",
"product": {
"name": "3.13.7S",
"product_id": "CSAFPID-217263"
}
},
{
"category": "service_pack",
"name": "3.13.6aS",
"product": {
"name": "3.13.6aS",
"product_id": "CSAFPID-220688"
}
},
{
"category": "service_pack",
"name": "3.13.6bS",
"product": {
"name": "3.13.6bS",
"product_id": "CSAFPID-225568"
}
},
{
"category": "service_pack",
"name": "3.13.7aS",
"product": {
"name": "3.13.7aS",
"product_id": "CSAFPID-225569"
}
}
],
"category": "product_version",
"name": "3.13S"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.14.0S",
"product": {
"name": "3.14.0S",
"product_id": "CSAFPID-206178"
}
},
{
"category": "service_pack",
"name": "3.14.1S",
"product": {
"name": "3.14.1S",
"product_id": "CSAFPID-206181"
}
},
{
"category": "service_pack",
"name": "3.14.2S",
"product": {
"name": "3.14.2S",
"product_id": "CSAFPID-206191"
}
},
{
"category": "service_pack",
"name": "3.14.3S",
"product": {
"name": "3.14.3S",
"product_id": "CSAFPID-206192"
}
},
{
"category": "service_pack",
"name": "3.14.4S",
"product": {
"name": "3.14.4S",
"product_id": "CSAFPID-206193"
}
}
],
"category": "product_version",
"name": "3.14S"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.15.0S",
"product": {
"name": "3.15.0S",
"product_id": "CSAFPID-206180"
}
},
{
"category": "service_pack",
"name": "3.15.1S",
"product": {
"name": "3.15.1S",
"product_id": "CSAFPID-210079"
}
},
{
"category": "service_pack",
"name": "3.15.2S",
"product": {
"name": "3.15.2S",
"product_id": "CSAFPID-212268"
}
},
{
"category": "service_pack",
"name": "3.15.1cS",
"product": {
"name": "3.15.1cS",
"product_id": "CSAFPID-213700"
}
},
{
"category": "service_pack",
"name": "3.15.3S",
"product": {
"name": "3.15.3S",
"product_id": "CSAFPID-213776"
}
},
{
"category": "service_pack",
"name": "3.15.4S",
"product": {
"name": "3.15.4S",
"product_id": "CSAFPID-217264"
}
}
],
"category": "product_version",
"name": "3.15S"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.7.0E",
"product": {
"name": "3.7.0E",
"product_id": "CSAFPID-206211"
}
},
{
"category": "service_pack",
"name": "3.7.1E",
"product": {
"name": "3.7.1E",
"product_id": "CSAFPID-210076"
}
},
{
"category": "service_pack",
"name": "3.7.2E",
"product": {
"name": "3.7.2E",
"product_id": "CSAFPID-210077"
}
},
{
"category": "service_pack",
"name": "3.7.3E",
"product": {
"name": "3.7.3E",
"product_id": "CSAFPID-213797"
}
},
{
"category": "service_pack",
"name": "3.7.4E",
"product": {
"name": "3.7.4E",
"product_id": "CSAFPID-217280"
}
},
{
"category": "service_pack",
"name": "3.7.5E",
"product": {
"name": "3.7.5E",
"product_id": "CSAFPID-220290"
}
}
],
"category": "product_version",
"name": "3.7E"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.16.0S",
"product": {
"name": "3.16.0S",
"product_id": "CSAFPID-210081"
}
},
{
"category": "service_pack",
"name": "3.16.0aS",
"product": {
"name": "3.16.0aS",
"product_id": "CSAFPID-213476"
}
},
{
"category": "service_pack",
"name": "3.16.1aS",
"product": {
"name": "3.16.1aS",
"product_id": "CSAFPID-213477"
}
},
{
"category": "service_pack",
"name": "3.16.2S",
"product": {
"name": "3.16.2S",
"product_id": "CSAFPID-213478"
}
},
{
"category": "service_pack",
"name": "3.16.2aS",
"product": {
"name": "3.16.2aS",
"product_id": "CSAFPID-213635"
}
},
{
"category": "service_pack",
"name": "3.16.0bS",
"product": {
"name": "3.16.0bS",
"product_id": "CSAFPID-213777"
}
},
{
"category": "service_pack",
"name": "3.16.0cS",
"product": {
"name": "3.16.0cS",
"product_id": "CSAFPID-213778"
}
},
{
"category": "service_pack",
"name": "3.16.3S",
"product": {
"name": "3.16.3S",
"product_id": "CSAFPID-213779"
}
},
{
"category": "service_pack",
"name": "3.16.2bS",
"product": {
"name": "3.16.2bS",
"product_id": "CSAFPID-217265"
}
},
{
"category": "service_pack",
"name": "3.16.3aS",
"product": {
"name": "3.16.3aS",
"product_id": "CSAFPID-217266"
}
},
{
"category": "service_pack",
"name": "3.16.4S",
"product": {
"name": "3.16.4S",
"product_id": "CSAFPID-217267"
}
},
{
"category": "service_pack",
"name": "3.16.4aS",
"product": {
"name": "3.16.4aS",
"product_id": "CSAFPID-220993"
}
},
{
"category": "service_pack",
"name": "3.16.4bS",
"product": {
"name": "3.16.4bS",
"product_id": "CSAFPID-222257"
}
},
{
"category": "service_pack",
"name": "3.16.4gS",
"product": {
"name": "3.16.4gS",
"product_id": "CSAFPID-222693"
}
},
{
"category": "service_pack",
"name": "3.16.5S",
"product": {
"name": "3.16.5S",
"product_id": "CSAFPID-222694"
}
},
{
"category": "service_pack",
"name": "3.16.4cS",
"product": {
"name": "3.16.4cS",
"product_id": "CSAFPID-222925"
}
},
{
"category": "service_pack",
"name": "3.16.4dS",
"product": {
"name": "3.16.4dS",
"product_id": "CSAFPID-223252"
}
},
{
"category": "service_pack",
"name": "3.16.4eS",
"product": {
"name": "3.16.4eS",
"product_id": "CSAFPID-224702"
}
},
{
"category": "service_pack",
"name": "3.16.5aS",
"product": {
"name": "3.16.5aS",
"product_id": "CSAFPID-225466"
}
},
{
"category": "service_pack",
"name": "3.16.5bS",
"product": {
"name": "3.16.5bS",
"product_id": "CSAFPID-225832"
}
}
],
"category": "product_version",
"name": "3.16S"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.17.0S",
"product": {
"name": "3.17.0S",
"product_id": "CSAFPID-212411"
}
},
{
"category": "service_pack",
"name": "3.17.1S",
"product": {
"name": "3.17.1S",
"product_id": "CSAFPID-212412"
}
},
{
"category": "service_pack",
"name": "3.17.2S",
"product": {
"name": "3.17.2S",
"product_id": "CSAFPID-217234"
}
},
{
"category": "service_pack",
"name": "3.17.1aS",
"product": {
"name": "3.17.1aS",
"product_id": "CSAFPID-217268"
}
},
{
"category": "service_pack",
"name": "3.17.3S",
"product": {
"name": "3.17.3S",
"product_id": "CSAFPID-222942"
}
}
],
"category": "product_version",
"name": "3.17S"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.2.1",
"product": {
"name": "16.2.1",
"product_id": "CSAFPID-213809"
}
},
{
"category": "service_pack",
"name": "16.2.2",
"product": {
"name": "16.2.2",
"product_id": "CSAFPID-217253"
}
}
],
"category": "product_version",
"name": "16.2"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.8.0E",
"product": {
"name": "3.8.0E",
"product_id": "CSAFPID-213811"
}
},
{
"category": "service_pack",
"name": "3.8.1E",
"product": {
"name": "3.8.1E",
"product_id": "CSAFPID-213812"
}
},
{
"category": "service_pack",
"name": "3.8.2E",
"product": {
"name": "3.8.2E",
"product_id": "CSAFPID-217283"
}
},
{
"category": "service_pack",
"name": "3.8.3E",
"product": {
"name": "3.8.3E",
"product_id": "CSAFPID-220489"
}
},
{
"category": "service_pack",
"name": "3.8.4E",
"product": {
"name": "3.8.4E",
"product_id": "CSAFPID-222695"
}
}
],
"category": "product_version",
"name": "3.8E"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.3.1",
"product": {
"name": "16.3.1",
"product_id": "CSAFPID-213960"
}
},
{
"category": "service_pack",
"name": "16.3.2",
"product": {
"name": "16.3.2",
"product_id": "CSAFPID-217255"
}
},
{
"category": "service_pack",
"name": "16.3.3",
"product": {
"name": "16.3.3",
"product_id": "CSAFPID-217256"
}
},
{
"category": "service_pack",
"name": "16.3.1a",
"product": {
"name": "16.3.1a",
"product_id": "CSAFPID-220802"
}
},
{
"category": "service_pack",
"name": "16.3.4",
"product": {
"name": "16.3.4",
"product_id": "CSAFPID-222711"
}
}
],
"category": "product_version",
"name": "16.3"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.4.1",
"product": {
"name": "16.4.1",
"product_id": "CSAFPID-214051"
}
},
{
"category": "service_pack",
"name": "16.4.2",
"product": {
"name": "16.4.2",
"product_id": "CSAFPID-217257"
}
}
],
"category": "product_version",
"name": "16.4"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.5.1",
"product": {
"name": "16.5.1",
"product_id": "CSAFPID-217259"
}
},
{
"category": "service_pack",
"name": "16.5.1a",
"product": {
"name": "16.5.1a",
"product_id": "CSAFPID-225784"
}
},
{
"category": "service_pack",
"name": "16.5.1b",
"product": {
"name": "16.5.1b",
"product_id": "CSAFPID-226330"
}
}
],
"category": "product_version",
"name": "16.5"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.18.0aS",
"product": {
"name": "3.18.0aS",
"product_id": "CSAFPID-217270"
}
},
{
"category": "service_pack",
"name": "3.18.0S",
"product": {
"name": "3.18.0S",
"product_id": "CSAFPID-217271"
}
},
{
"category": "service_pack",
"name": "3.18.1S",
"product": {
"name": "3.18.1S",
"product_id": "CSAFPID-217272"
}
},
{
"category": "service_pack",
"name": "3.18.2S",
"product": {
"name": "3.18.2S",
"product_id": "CSAFPID-217273"
}
},
{
"category": "service_pack",
"name": "3.18.3S",
"product": {
"name": "3.18.3S",
"product_id": "CSAFPID-226078"
}
}
],
"category": "product_version",
"name": "3.18S"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.18.0SP",
"product": {
"name": "3.18.0SP",
"product_id": "CSAFPID-217276"
}
},
{
"category": "service_pack",
"name": "3.18.1SP",
"product": {
"name": "3.18.1SP",
"product_id": "CSAFPID-220517"
}
},
{
"category": "service_pack",
"name": "3.18.1aSP",
"product": {
"name": "3.18.1aSP",
"product_id": "CSAFPID-223018"
}
},
{
"category": "service_pack",
"name": "3.18.1gSP",
"product": {
"name": "3.18.1gSP",
"product_id": "CSAFPID-223019"
}
},
{
"category": "service_pack",
"name": "3.18.1bSP",
"product": {
"name": "3.18.1bSP",
"product_id": "CSAFPID-223241"
}
},
{
"category": "service_pack",
"name": "3.18.1cSP",
"product": {
"name": "3.18.1cSP",
"product_id": "CSAFPID-224424"
}
},
{
"category": "service_pack",
"name": "3.18.2SP",
"product": {
"name": "3.18.2SP",
"product_id": "CSAFPID-225168"
}
},
{
"category": "service_pack",
"name": "3.18.1hSP",
"product": {
"name": "3.18.1hSP",
"product_id": "CSAFPID-225359"
}
},
{
"category": "service_pack",
"name": "3.18.2aSP",
"product": {
"name": "3.18.2aSP",
"product_id": "CSAFPID-226160"
}
},
{
"category": "service_pack",
"name": "3.18.1iSP",
"product": {
"name": "3.18.1iSP",
"product_id": "CSAFPID-226354"
}
}
],
"category": "product_version",
"name": "3.18SP"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.9.0E",
"product": {
"name": "3.9.0E",
"product_id": "CSAFPID-217282"
}
},
{
"category": "service_pack",
"name": "3.9.1E",
"product": {
"name": "3.9.1E",
"product_id": "CSAFPID-222483"
}
},
{
"category": "service_pack",
"name": "3.9.2E",
"product": {
"name": "3.9.2E",
"product_id": "CSAFPID-226158"
}
},
{
"category": "service_pack",
"name": "3.9.2bE",
"product": {
"name": "3.9.2bE",
"product_id": "CSAFPID-227755"
}
}
],
"category": "product_version",
"name": "3.9E"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.11.99SW",
"product": {
"name": "17.11.99SW",
"product_id": "CSAFPID-296860"
}
}
],
"category": "product_version",
"name": "17.11SW"
}
],
"category": "product_family",
"name": "Cisco IOS XE Software"
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2018-0467",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCuz28570"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-117783",
"CSAFPID-190980",
"CSAFPID-193406",
"CSAFPID-193407",
"CSAFPID-193408",
"CSAFPID-193409",
"CSAFPID-193544",
"CSAFPID-194877",
"CSAFPID-196322",
"CSAFPID-197457",
"CSAFPID-197469",
"CSAFPID-197483",
"CSAFPID-198309",
"CSAFPID-198528",
"CSAFPID-200485",
"CSAFPID-200487",
"CSAFPID-200509",
"CSAFPID-201595",
"CSAFPID-204105",
"CSAFPID-204106",
"CSAFPID-204107",
"CSAFPID-204108",
"CSAFPID-204186",
"CSAFPID-204281",
"CSAFPID-204822",
"CSAFPID-204830",
"CSAFPID-204901",
"CSAFPID-205516",
"CSAFPID-205670",
"CSAFPID-209046",
"CSAFPID-209047",
"CSAFPID-209051",
"CSAFPID-209093",
"CSAFPID-209096",
"CSAFPID-209097",
"CSAFPID-209099",
"CSAFPID-209102",
"CSAFPID-209103",
"CSAFPID-209104",
"CSAFPID-209105",
"CSAFPID-209106",
"CSAFPID-209107",
"CSAFPID-209113",
"CSAFPID-209115",
"CSAFPID-209268",
"CSAFPID-209358",
"CSAFPID-209360",
"CSAFPID-209632",
"CSAFPID-209887",
"CSAFPID-209929",
"CSAFPID-210203",
"CSAFPID-210958",
"CSAFPID-211297",
"CSAFPID-211603",
"CSAFPID-211751",
"CSAFPID-211825",
"CSAFPID-211984",
"CSAFPID-212118",
"CSAFPID-212127",
"CSAFPID-212321",
"CSAFPID-212407",
"CSAFPID-212445",
"CSAFPID-213001",
"CSAFPID-213032",
"CSAFPID-213034",
"CSAFPID-213086",
"CSAFPID-213594",
"CSAFPID-213610",
"CSAFPID-213633",
"CSAFPID-213789",
"CSAFPID-213794",
"CSAFPID-214072",
"CSAFPID-214074",
"CSAFPID-214078",
"CSAFPID-214161",
"CSAFPID-214479",
"CSAFPID-214556",
"CSAFPID-214938",
"CSAFPID-216215",
"CSAFPID-216419",
"CSAFPID-216577",
"CSAFPID-216961",
"CSAFPID-216962",
"CSAFPID-217805",
"CSAFPID-218996",
"CSAFPID-218997",
"CSAFPID-220038",
"CSAFPID-220396",
"CSAFPID-220441",
"CSAFPID-220445",
"CSAFPID-220457",
"CSAFPID-220521",
"CSAFPID-220522",
"CSAFPID-220664",
"CSAFPID-220673",
"CSAFPID-220675",
"CSAFPID-221093",
"CSAFPID-222275",
"CSAFPID-222419",
"CSAFPID-222500",
"CSAFPID-222924",
"CSAFPID-222931",
"CSAFPID-222988",
"CSAFPID-222989",
"CSAFPID-223085",
"CSAFPID-223189",
"CSAFPID-224327",
"CSAFPID-224553",
"CSAFPID-224566",
"CSAFPID-225667",
"CSAFPID-225740",
"CSAFPID-226076",
"CSAFPID-226077",
"CSAFPID-227172",
"CSAFPID-227613",
"CSAFPID-227754",
"CSAFPID-230588",
"CSAFPID-230589",
"CSAFPID-230590",
"CSAFPID-230612",
"CSAFPID-230613",
"CSAFPID-230614",
"CSAFPID-230616",
"CSAFPID-232093",
"CSAFPID-236297",
"CSAFPID-241916",
"CSAFPID-250628",
"CSAFPID-254081",
"CSAFPID-262382",
"CSAFPID-275327",
"CSAFPID-277232",
"CSAFPID-278136",
"CSAFPID-280759",
"CSAFPID-283833",
"CSAFPID-284291",
"CSAFPID-284341",
"CSAFPID-284566",
"CSAFPID-284785",
"CSAFPID-286029",
"CSAFPID-286399",
"CSAFPID-286400",
"CSAFPID-286451",
"CSAFPID-286844",
"CSAFPID-286927",
"CSAFPID-286940",
"CSAFPID-289270",
"CSAFPID-289301",
"CSAFPID-289371",
"CSAFPID-290557",
"CSAFPID-290618",
"CSAFPID-200770",
"CSAFPID-201495",
"CSAFPID-206161",
"CSAFPID-206162",
"CSAFPID-206174",
"CSAFPID-206175",
"CSAFPID-206176",
"CSAFPID-206178",
"CSAFPID-206180",
"CSAFPID-206181",
"CSAFPID-206191",
"CSAFPID-206192",
"CSAFPID-206193",
"CSAFPID-206211",
"CSAFPID-210076",
"CSAFPID-210077",
"CSAFPID-210078",
"CSAFPID-210079",
"CSAFPID-210081",
"CSAFPID-212268",
"CSAFPID-212411",
"CSAFPID-212412",
"CSAFPID-213474",
"CSAFPID-213475",
"CSAFPID-213476",
"CSAFPID-213477",
"CSAFPID-213478",
"CSAFPID-213557",
"CSAFPID-213635",
"CSAFPID-213661",
"CSAFPID-213700",
"CSAFPID-213776",
"CSAFPID-213777",
"CSAFPID-213778",
"CSAFPID-213779",
"CSAFPID-213781",
"CSAFPID-213797",
"CSAFPID-213809",
"CSAFPID-213811",
"CSAFPID-213812",
"CSAFPID-213960",
"CSAFPID-214051",
"CSAFPID-217234",
"CSAFPID-217253",
"CSAFPID-217255",
"CSAFPID-217256",
"CSAFPID-217257",
"CSAFPID-217259",
"CSAFPID-217261",
"CSAFPID-217262",
"CSAFPID-217263",
"CSAFPID-217264",
"CSAFPID-217265",
"CSAFPID-217266",
"CSAFPID-217267",
"CSAFPID-217268",
"CSAFPID-217270",
"CSAFPID-217271",
"CSAFPID-217272",
"CSAFPID-217273",
"CSAFPID-217276",
"CSAFPID-217280",
"CSAFPID-217282",
"CSAFPID-217283",
"CSAFPID-220290",
"CSAFPID-220489",
"CSAFPID-220517",
"CSAFPID-220688",
"CSAFPID-220802",
"CSAFPID-220993",
"CSAFPID-222257",
"CSAFPID-222483",
"CSAFPID-222693",
"CSAFPID-222694",
"CSAFPID-222695",
"CSAFPID-222711",
"CSAFPID-222925",
"CSAFPID-222942",
"CSAFPID-223018",
"CSAFPID-223019",
"CSAFPID-223241",
"CSAFPID-223252",
"CSAFPID-224424",
"CSAFPID-224702",
"CSAFPID-225168",
"CSAFPID-225359",
"CSAFPID-225466",
"CSAFPID-225568",
"CSAFPID-225569",
"CSAFPID-225784",
"CSAFPID-225832",
"CSAFPID-226078",
"CSAFPID-226158",
"CSAFPID-226160",
"CSAFPID-226330",
"CSAFPID-226354",
"CSAFPID-227755",
"CSAFPID-296860"
]
},
"release_date": "2018-09-26T16:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-200770",
"CSAFPID-201495",
"CSAFPID-206161",
"CSAFPID-206162",
"CSAFPID-206174",
"CSAFPID-206175",
"CSAFPID-206176",
"CSAFPID-206178",
"CSAFPID-206180",
"CSAFPID-206181",
"CSAFPID-206191",
"CSAFPID-206192",
"CSAFPID-206193",
"CSAFPID-206211",
"CSAFPID-210076",
"CSAFPID-210077",
"CSAFPID-210078",
"CSAFPID-210079",
"CSAFPID-210081",
"CSAFPID-212268",
"CSAFPID-212411",
"CSAFPID-212412",
"CSAFPID-213474",
"CSAFPID-213475",
"CSAFPID-213476",
"CSAFPID-213477",
"CSAFPID-213478",
"CSAFPID-213557",
"CSAFPID-213635",
"CSAFPID-213661",
"CSAFPID-213700",
"CSAFPID-213776",
"CSAFPID-213777",
"CSAFPID-213778",
"CSAFPID-213779",
"CSAFPID-213781",
"CSAFPID-213797",
"CSAFPID-213809",
"CSAFPID-213811",
"CSAFPID-213812",
"CSAFPID-213960",
"CSAFPID-214051",
"CSAFPID-217234",
"CSAFPID-217253",
"CSAFPID-217255",
"CSAFPID-217256",
"CSAFPID-217257",
"CSAFPID-217259",
"CSAFPID-217261",
"CSAFPID-217262",
"CSAFPID-217263",
"CSAFPID-217264",
"CSAFPID-217265",
"CSAFPID-217266",
"CSAFPID-217267",
"CSAFPID-217268",
"CSAFPID-217270",
"CSAFPID-217271",
"CSAFPID-217272",
"CSAFPID-217273",
"CSAFPID-217276",
"CSAFPID-217280",
"CSAFPID-217282",
"CSAFPID-217283",
"CSAFPID-220290",
"CSAFPID-220489",
"CSAFPID-220517",
"CSAFPID-220688",
"CSAFPID-220802",
"CSAFPID-220993",
"CSAFPID-222257",
"CSAFPID-222483",
"CSAFPID-222693",
"CSAFPID-222694",
"CSAFPID-222695",
"CSAFPID-222711",
"CSAFPID-222925",
"CSAFPID-222942",
"CSAFPID-223018",
"CSAFPID-223019",
"CSAFPID-223241",
"CSAFPID-223252",
"CSAFPID-224424",
"CSAFPID-224702",
"CSAFPID-225168",
"CSAFPID-225359",
"CSAFPID-225466",
"CSAFPID-225568",
"CSAFPID-225569",
"CSAFPID-225784",
"CSAFPID-225832",
"CSAFPID-226078",
"CSAFPID-226158",
"CSAFPID-226160",
"CSAFPID-226330",
"CSAFPID-226354",
"CSAFPID-227755",
"CSAFPID-296860",
"CSAFPID-117783",
"CSAFPID-190980",
"CSAFPID-193406",
"CSAFPID-193407",
"CSAFPID-193408",
"CSAFPID-193409",
"CSAFPID-193544",
"CSAFPID-194877",
"CSAFPID-196322",
"CSAFPID-197457",
"CSAFPID-197469",
"CSAFPID-197483",
"CSAFPID-198309",
"CSAFPID-198528",
"CSAFPID-200485",
"CSAFPID-200487",
"CSAFPID-200509",
"CSAFPID-201595",
"CSAFPID-204105",
"CSAFPID-204106",
"CSAFPID-204107",
"CSAFPID-204108",
"CSAFPID-204186",
"CSAFPID-204281",
"CSAFPID-204822",
"CSAFPID-204830",
"CSAFPID-204901",
"CSAFPID-205516",
"CSAFPID-205670",
"CSAFPID-209046",
"CSAFPID-209047",
"CSAFPID-209051",
"CSAFPID-209093",
"CSAFPID-209096",
"CSAFPID-209097",
"CSAFPID-209099",
"CSAFPID-209102",
"CSAFPID-209103",
"CSAFPID-209104",
"CSAFPID-209105",
"CSAFPID-209106",
"CSAFPID-209107",
"CSAFPID-209113",
"CSAFPID-209115",
"CSAFPID-209268",
"CSAFPID-209358",
"CSAFPID-209360",
"CSAFPID-209632",
"CSAFPID-209887",
"CSAFPID-209929",
"CSAFPID-210203",
"CSAFPID-210958",
"CSAFPID-211297",
"CSAFPID-211603",
"CSAFPID-211751",
"CSAFPID-211825",
"CSAFPID-211984",
"CSAFPID-212118",
"CSAFPID-212127",
"CSAFPID-212321",
"CSAFPID-212407",
"CSAFPID-212445",
"CSAFPID-213001",
"CSAFPID-213032",
"CSAFPID-213034",
"CSAFPID-213086",
"CSAFPID-213594",
"CSAFPID-213610",
"CSAFPID-213633",
"CSAFPID-213789",
"CSAFPID-213794",
"CSAFPID-214072",
"CSAFPID-214074",
"CSAFPID-214078",
"CSAFPID-214161",
"CSAFPID-214479",
"CSAFPID-214556",
"CSAFPID-214938",
"CSAFPID-216215",
"CSAFPID-216419",
"CSAFPID-216577",
"CSAFPID-216961",
"CSAFPID-216962",
"CSAFPID-217805",
"CSAFPID-218996",
"CSAFPID-218997",
"CSAFPID-220038",
"CSAFPID-220396",
"CSAFPID-220441",
"CSAFPID-220445",
"CSAFPID-220457",
"CSAFPID-220521",
"CSAFPID-220522",
"CSAFPID-220664",
"CSAFPID-220673",
"CSAFPID-220675",
"CSAFPID-221093",
"CSAFPID-222275",
"CSAFPID-222419",
"CSAFPID-222500",
"CSAFPID-222924",
"CSAFPID-222931",
"CSAFPID-222988",
"CSAFPID-222989",
"CSAFPID-223085",
"CSAFPID-223189",
"CSAFPID-224327",
"CSAFPID-224553",
"CSAFPID-224566",
"CSAFPID-225667",
"CSAFPID-225740",
"CSAFPID-226076",
"CSAFPID-226077",
"CSAFPID-227172",
"CSAFPID-227613",
"CSAFPID-227754",
"CSAFPID-230588",
"CSAFPID-230589",
"CSAFPID-230590",
"CSAFPID-230612",
"CSAFPID-230613",
"CSAFPID-230614",
"CSAFPID-230616",
"CSAFPID-232093",
"CSAFPID-236297",
"CSAFPID-241916",
"CSAFPID-250628",
"CSAFPID-254081",
"CSAFPID-262382",
"CSAFPID-275327",
"CSAFPID-277232",
"CSAFPID-278136",
"CSAFPID-280759",
"CSAFPID-283833",
"CSAFPID-284291",
"CSAFPID-284341",
"CSAFPID-284566",
"CSAFPID-284785",
"CSAFPID-286029",
"CSAFPID-286399",
"CSAFPID-286400",
"CSAFPID-286451",
"CSAFPID-286844",
"CSAFPID-286927",
"CSAFPID-286940",
"CSAFPID-289270",
"CSAFPID-289301",
"CSAFPID-289371",
"CSAFPID-290557",
"CSAFPID-290618"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-117783",
"CSAFPID-190980",
"CSAFPID-193406",
"CSAFPID-193407",
"CSAFPID-193408",
"CSAFPID-193409",
"CSAFPID-193544",
"CSAFPID-194877",
"CSAFPID-196322",
"CSAFPID-197457",
"CSAFPID-197469",
"CSAFPID-197483",
"CSAFPID-198309",
"CSAFPID-198528",
"CSAFPID-200485",
"CSAFPID-200487",
"CSAFPID-200509",
"CSAFPID-201595",
"CSAFPID-204105",
"CSAFPID-204106",
"CSAFPID-204107",
"CSAFPID-204108",
"CSAFPID-204186",
"CSAFPID-204281",
"CSAFPID-204822",
"CSAFPID-204830",
"CSAFPID-204901",
"CSAFPID-205516",
"CSAFPID-205670",
"CSAFPID-209046",
"CSAFPID-209047",
"CSAFPID-209051",
"CSAFPID-209093",
"CSAFPID-209096",
"CSAFPID-209097",
"CSAFPID-209099",
"CSAFPID-209102",
"CSAFPID-209103",
"CSAFPID-209104",
"CSAFPID-209105",
"CSAFPID-209106",
"CSAFPID-209107",
"CSAFPID-209113",
"CSAFPID-209115",
"CSAFPID-209268",
"CSAFPID-209358",
"CSAFPID-209360",
"CSAFPID-209632",
"CSAFPID-209887",
"CSAFPID-209929",
"CSAFPID-210203",
"CSAFPID-210958",
"CSAFPID-211297",
"CSAFPID-211603",
"CSAFPID-211751",
"CSAFPID-211825",
"CSAFPID-211984",
"CSAFPID-212118",
"CSAFPID-212127",
"CSAFPID-212321",
"CSAFPID-212407",
"CSAFPID-212445",
"CSAFPID-213001",
"CSAFPID-213032",
"CSAFPID-213034",
"CSAFPID-213086",
"CSAFPID-213594",
"CSAFPID-213610",
"CSAFPID-213633",
"CSAFPID-213789",
"CSAFPID-213794",
"CSAFPID-214072",
"CSAFPID-214074",
"CSAFPID-214078",
"CSAFPID-214161",
"CSAFPID-214479",
"CSAFPID-214556",
"CSAFPID-214938",
"CSAFPID-216215",
"CSAFPID-216419",
"CSAFPID-216577",
"CSAFPID-216961",
"CSAFPID-216962",
"CSAFPID-217805",
"CSAFPID-218996",
"CSAFPID-218997",
"CSAFPID-220038",
"CSAFPID-220396",
"CSAFPID-220441",
"CSAFPID-220445",
"CSAFPID-220457",
"CSAFPID-220521",
"CSAFPID-220522",
"CSAFPID-220664",
"CSAFPID-220673",
"CSAFPID-220675",
"CSAFPID-221093",
"CSAFPID-222275",
"CSAFPID-222419",
"CSAFPID-222500",
"CSAFPID-222924",
"CSAFPID-222931",
"CSAFPID-222988",
"CSAFPID-222989",
"CSAFPID-223085",
"CSAFPID-223189",
"CSAFPID-224327",
"CSAFPID-224553",
"CSAFPID-224566",
"CSAFPID-225667",
"CSAFPID-225740",
"CSAFPID-226076",
"CSAFPID-226077",
"CSAFPID-227172",
"CSAFPID-227613",
"CSAFPID-227754",
"CSAFPID-230588",
"CSAFPID-230589",
"CSAFPID-230590",
"CSAFPID-230612",
"CSAFPID-230613",
"CSAFPID-230614",
"CSAFPID-230616",
"CSAFPID-232093",
"CSAFPID-236297",
"CSAFPID-241916",
"CSAFPID-250628",
"CSAFPID-254081",
"CSAFPID-262382",
"CSAFPID-275327",
"CSAFPID-277232",
"CSAFPID-278136",
"CSAFPID-280759",
"CSAFPID-283833",
"CSAFPID-284291",
"CSAFPID-284341",
"CSAFPID-284566",
"CSAFPID-284785",
"CSAFPID-286029",
"CSAFPID-286399",
"CSAFPID-286400",
"CSAFPID-286451",
"CSAFPID-286844",
"CSAFPID-286927",
"CSAFPID-286940",
"CSAFPID-289270",
"CSAFPID-289301",
"CSAFPID-289371",
"CSAFPID-290557",
"CSAFPID-290618",
"CSAFPID-200770",
"CSAFPID-201495",
"CSAFPID-206161",
"CSAFPID-206162",
"CSAFPID-206174",
"CSAFPID-206175",
"CSAFPID-206176",
"CSAFPID-206178",
"CSAFPID-206180",
"CSAFPID-206181",
"CSAFPID-206191",
"CSAFPID-206192",
"CSAFPID-206193",
"CSAFPID-206211",
"CSAFPID-210076",
"CSAFPID-210077",
"CSAFPID-210078",
"CSAFPID-210079",
"CSAFPID-210081",
"CSAFPID-212268",
"CSAFPID-212411",
"CSAFPID-212412",
"CSAFPID-213474",
"CSAFPID-213475",
"CSAFPID-213476",
"CSAFPID-213477",
"CSAFPID-213478",
"CSAFPID-213557",
"CSAFPID-213635",
"CSAFPID-213661",
"CSAFPID-213700",
"CSAFPID-213776",
"CSAFPID-213777",
"CSAFPID-213778",
"CSAFPID-213779",
"CSAFPID-213781",
"CSAFPID-213797",
"CSAFPID-213809",
"CSAFPID-213811",
"CSAFPID-213812",
"CSAFPID-213960",
"CSAFPID-214051",
"CSAFPID-217234",
"CSAFPID-217253",
"CSAFPID-217255",
"CSAFPID-217256",
"CSAFPID-217257",
"CSAFPID-217259",
"CSAFPID-217261",
"CSAFPID-217262",
"CSAFPID-217263",
"CSAFPID-217264",
"CSAFPID-217265",
"CSAFPID-217266",
"CSAFPID-217267",
"CSAFPID-217268",
"CSAFPID-217270",
"CSAFPID-217271",
"CSAFPID-217272",
"CSAFPID-217273",
"CSAFPID-217276",
"CSAFPID-217280",
"CSAFPID-217282",
"CSAFPID-217283",
"CSAFPID-220290",
"CSAFPID-220489",
"CSAFPID-220517",
"CSAFPID-220688",
"CSAFPID-220802",
"CSAFPID-220993",
"CSAFPID-222257",
"CSAFPID-222483",
"CSAFPID-222693",
"CSAFPID-222694",
"CSAFPID-222695",
"CSAFPID-222711",
"CSAFPID-222925",
"CSAFPID-222942",
"CSAFPID-223018",
"CSAFPID-223019",
"CSAFPID-223241",
"CSAFPID-223252",
"CSAFPID-224424",
"CSAFPID-224702",
"CSAFPID-225168",
"CSAFPID-225359",
"CSAFPID-225466",
"CSAFPID-225568",
"CSAFPID-225569",
"CSAFPID-225784",
"CSAFPID-225832",
"CSAFPID-226078",
"CSAFPID-226158",
"CSAFPID-226160",
"CSAFPID-226330",
"CSAFPID-226354",
"CSAFPID-227755",
"CSAFPID-296860"
]
}
],
"title": "Cisco IOS and IOS XE Software IPv6 Hop-by-Hop Options Denial of Service Vulnerability"
}
]
}
ghsa-w77w-7rqr-q6v8
Vulnerability from github
Published
2022-05-14 01:10
Modified
2022-05-14 01:10
Severity ?
Details
A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device.
{
"affected": [],
"aliases": [
"CVE-2018-0467"
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2018-10-05T14:29:00Z",
"severity": "HIGH"
},
"details": "A vulnerability in the IPv6 processing code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of specific IPv6 hop-by-hop options. An attacker could exploit this vulnerability by sending a malicious IPv6 packet to or through the affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device.",
"id": "GHSA-w77w-7rqr-q6v8",
"modified": "2022-05-14T01:10:38Z",
"published": "2022-05-14T01:10:38Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0467"
},
{
"type": "WEB",
"url": "https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03"
},
{
"type": "WEB",
"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipv6hbh"
},
{
"type": "WEB",
"url": "http://www.securitytracker.com/id/1041737"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
Loading...
Loading...
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.