EXPOSURES › CVE-2018-0179
CVE-2018-0179
HIGH ⌖ ON CISA KEV · EXPLOITEDCisco IOS Software's Login Enhancements feature allowed unauthenticated remote attackers to trigger system reloads via a DoS vulnerability.
An unauthenticated remote attacker could force a Cisco IOS system reload, causing denial of service. DIB orgs must ensure all network infrastructure is patched against actively exploited vulnerabilities like this one, as unpatched DoS flaws can disrupt critical operations and violate CMMC/NIST 800-171 requirements for timely patch management.
Shame score — A known DoS vulnerability in a widely deployed network OS was actively exploited in the wild, indicating a failure to patch a critical flaw before it was weaponized.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.
"A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition."
| PRODUCT | STATUS |
|---|---|
| AppDynamics GovAPM AppDynamics (a Cisco company) |
Authorized |
| Cisco Cloudlock for Government Cisco Systems Inc. |
Authorized |
| Cisco Meraki for Government Cisco Systems Inc. |
In Process |
| Cisco SD-WAN for Government Cisco Systems Inc. |
In Process |
| Cisco Umbrella for Government Cisco Systems Inc. |
In Process |
| Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc. |
Authorized |
| Duo Federal Duo Security (A Cisco Company) |
Authorized |
| WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc. |
In Process |
| Webex for Government Cisco Systems Inc. |
Authorized |