Skip to content
COOEY

EXPOSURES › CVE-2018-0180

CVE-2018-0180

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-03-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2018-0180 ↗
⌖ EXPLOITED IN THE WILD SHAME 78/100 exploited-in-wildunpatched

A decades-old Cisco IOS DoS vulnerability (CVE-2018-0180) remains actively exploited in the wild, proving that unpatched legacy hardware is a critical compliance failure.

Cisco IOS Software's Login Enhancements feature allows unauthenticated remote attackers to trigger system reloads, causing denial of service. DIB organizations must care because this unpatched, long-known vulnerability is actively exploited, directly impacting availability and violating CMMC/NIST 800-171 requirements for patch management and vulnerability mitigation. Organizations must immediately assess their Cisco IOS deployments, apply patches, and enforce strict change management to prevent similar compliance failures.

Shame score — A decades-old vulnerability remains unpatched and actively exploited in the wild, demonstrating severe negligence in patch management and hardware lifecycle oversight.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Cisco Systems Inc. · vendorIOS · product
DESCRIPTION

A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.60
A DoS vulnerability in a core networking feature like Login Block is a severe security failure, though the provided source is purely technical and lacks any commentary on Cisco's response or the broad
cooey ↗ severe-fallout +0.00
Neutral technical description; no sentiment expressed.
"A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition."
AFFECTED FEDRAMP PRODUCTS · 9
PRODUCTSTATUS
AppDynamics GovAPM
AppDynamics (a Cisco company)
 Authorized
Cisco Cloudlock for Government
Cisco Systems Inc.
 Authorized
Cisco Meraki for Government
Cisco Systems Inc.
 In Process
Cisco SD-WAN for Government
Cisco Systems Inc.
 In Process
Cisco Umbrella for Government
Cisco Systems Inc.
 In Process
Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government)
Cisco Systems Inc.
 Authorized
Duo Federal
Duo Security (A Cisco Company)
 Authorized
WebEx Contact Center Enterprise for Government (WxCCE-G)
Cisco Systems Inc.
 In Process
Webex for Government
Cisco Systems Inc.
 Authorized