CVE-2018-0161
Cisco IOS Software Resource Management Errors Vulnerability
Does this matter?
Known to be exploited in the wild (CISA KEV, CISA remediation deadline 17 March 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise.
Description
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Object ID Denial of Service Vulnerability. The vulnerability is due to a condition that could occur when the affected software processes an SNMP read request that contains a request for the ciscoFlashMIB object ID (OID). An attacker could trigger this vulnerability by issuing an SNMP GET request for the ciscoFlashMIB OID on an affected device. A successful exploit could cause the affected device to restart due to a SYS-3-CPUHOG. This vulnerability affects the following Cisco devices if they are running a vulnerable release of Cisco IOS Software and are configured to use SNMP Version 2 (SNMPv2) or SNMP Version 3 (SNMPv3): Cisco Catalyst 2960-L Series Switches, Cisco Catalyst Digital Building Series Switches 8P, Cisco Catalyst Digital Building Series Switches 8U. Cisco Bug IDs: CSCvd89541.
- CVSS 3.1
- 6.3 MEDIUMCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
- EPSS
- 4.12% probability · 91th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Listed 3 March 2022 · due 17 March 2022
- Weakness
- CWE-399
- Affected
- cisco/ios
- Source
- psirt@cisco.com
EPSS 4.1% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
CISA notes
Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2018-0161
References
- http://www.securityfocus.com/bid/103573Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040589Broken Link, Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmpMitigation, Vendor Advisory
- http://www.securityfocus.com/bid/103573Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040589Broken Link, Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmpMitigation, Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0161US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.