EXPOSURES › CVE-2018-0161
CVE-2018-0161
HIGH ⌖ ON CISA KEV · EXPLOITEDCisco IOS Software SNMP subsystem allowed authenticated remote attackers to cause denial-of-service via resource management errors.
An authenticated remote attacker could trigger a denial-of-service condition in Cisco Catalyst Switches running vulnerable IOS Software. DIB organizations must ensure all network infrastructure is patched against known CVEs to prevent service disruption and maintain compliance with NIST 800-171 security requirements.
Shame score — A known vulnerability in a widely deployed networking product that was actively exploited in the wild, indicating a failure to patch a critical infrastructure component.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition.
"A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service (DoS) condition."
| PRODUCT | STATUS |
|---|---|
| AppDynamics GovAPM AppDynamics (a Cisco company) |
Authorized |
| Cisco Cloudlock for Government Cisco Systems Inc. |
Authorized |
| Cisco Meraki for Government Cisco Systems Inc. |
In Process |
| Cisco SD-WAN for Government Cisco Systems Inc. |
In Process |
| Cisco Umbrella for Government Cisco Systems Inc. |
In Process |
| Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc. |
Authorized |
| Duo Federal Duo Security (A Cisco Company) |
Authorized |
| WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc. |
In Process |
| Webex for Government Cisco Systems Inc. |
Authorized |