6.5

CVE-2018-0466

EPSS 0.34%
Veröffentlicht 05.10.2018 14:29:04
Zuletzt bearbeitet 21.11.2024 03:38:17
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

A vulnerability in the Open Shortest Path First version 3 (OSPFv3) implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to incorrect handling of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending crafted OSPFv3 Link-State Advertisements (LSA) to an affected device. An exploit could allow the attacker to cause an affected device to reload, leading to a denial of service (DoS) condition.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Ios Version16.2.1

Cisco ≫ Ios Xe Version16.2.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.34%	0.563

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	6.1	6.5	6.9	AV:A/AC:L/Au:N/C:N/I:N/A:C

http://www.securityfocus.com/bid/105403

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1041737

Third Party Advisory

VDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ospfv3-dos

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-0466

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-0466

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-0466

EUVD