EXPOSURES › CVE-2018-0154
CVE-2018-0154
HIGH ⌖ ON CISA KEV · EXPLOITEDCisco ISM-VPN crypto engine DoS vulnerability allowed unauthenticated remote attackers to crash devices, marking it as actively exploited in the KEV catalog.
A denial-of-service flaw in the crypto engine of Cisco's ISM-VPN module let unauthenticated remote attackers crash the device, and it was listed in CISA's KEV catalog as actively exploited. DIB orgs must care because unpatched hardware can be taken offline by remote attackers, causing operational disruption and potential compliance gaps if critical infrastructure is unavailable. Organizations should verify patch levels on all ISM-VPN devices and replace or upgrade hardware running unpatched firmware.
Shame score — The vulnerability was actively exploited in the wild and listed in CISA's KEV catalog, indicating negligent patching and avoidable operational risk.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition.
| PRODUCT | STATUS |
|---|---|
| AppDynamics GovAPM AppDynamics (a Cisco company) |
Authorized |
| Cisco Cloudlock for Government Cisco Systems Inc. |
Authorized |
| Cisco Meraki for Government Cisco Systems Inc. |
In Process |
| Cisco SD-WAN for Government Cisco Systems Inc. |
In Process |
| Cisco Umbrella for Government Cisco Systems Inc. |
In Process |
| Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc. |
Authorized |
| Duo Federal Duo Security (A Cisco Company) |
Authorized |
| WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc. |
In Process |
| Webex for Government Cisco Systems Inc. |
Authorized |