CVE-2018-0154 : A vulnerability in the crypto engine of the Cisco Integrated Services Module for

Products affected by CVE-2018-0154

Cisco » IOS » Version: N/A
cpe:2.3:o:cisco:ios:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 1000 Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4g/6g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltegb Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltena Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-6g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-lte Integrated Services Router » Version: N/A
When used together with: Cisco » 1100 Integrated Services Router » Version: N/A
When used together with: Cisco » 1101-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1101 Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-2p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109 Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x Integrated Services Router » Version: N/A
When used together with: Cisco » 111x Integrated Services Router » Version: N/A
When used together with: Cisco » 1120 Integrated Services Router » Version: N/A
When used together with: Cisco » 1131 Integrated Services Router » Version: N/A
When used together with: Cisco » 1160 Integrated Services Router » Version: N/A
When used together with: Cisco » 1801 Integrated Service Router » Version: N/A
When used together with: Cisco » 1802 Integrated Service Router » Version: N/A
When used together with: Cisco » 1803 Integrated Service Router » Version: N/A
When used together with: Cisco » 1811 Integrated Service Router » Version: N/A
When used together with: Cisco » 1812 Integrated Service Router » Version: N/A
When used together with: Cisco » 1841 Integrated Service Router » Version: N/A
When used together with: Cisco » 1861 Integrated Service Router » Version: N/A
When used together with: Cisco » 1905 Integrated Services Router » Version: N/A
When used together with: Cisco » 1906c Integrated Services Router » Version: N/A
When used together with: Cisco » 1921 Integrated Services Router » Version: N/A
When used together with: Cisco » 1941 Integrated Services Router » Version: N/A
When used together with: Cisco » 1941w Integrated Services Router » Version: N/A
When used together with: Cisco » 4000 Integrated Services Router » Version: N/A
When used together with: Cisco » 4221 Integrated Services Router » Version: N/A
When used together with: Cisco » 4321/k9-rf Integrated Services Router » Version: N/A
When used together with: Cisco » 4321/k9-ws Integrated Services Router » Version: N/A
When used together with: Cisco » 4321/k9 Integrated Services Router » Version: N/A
When used together with: Cisco » 4321 Integrated Services Router » Version: N/A
When used together with: Cisco » 4331/k9-rf Integrated Services Router » Version: N/A
When used together with: Cisco » 4331/k9-ws Integrated Services Router » Version: N/A
When used together with: Cisco » 4331/k9 Integrated Services Router » Version: N/A
When used together with: Cisco » 4331 Integrated Services Router » Version: N/A
When used together with: Cisco » 4351/k9-rf Integrated Services Router » Version: N/A
When used together with: Cisco » 4351/k9-ws Integrated Services Router » Version: N/A
When used together with: Cisco » 4351/k9 Integrated Services Router » Version: N/A
When used together with: Cisco » 4351 Integrated Services Router » Version: N/A
When used together with: Cisco » 4431 Integrated Services Router » Version: N/A
When used together with: Cisco » 44461 Integrated Services Router » Version: N/A
When used together with: Cisco » 4451-x Integrated Services Router » Version: N/A
When used together with: Cisco » 4451 Integrated Services Router » Version: N/A
When used together with: Cisco » 4461 Integrated Services Router » Version: N/A
When used together with: Cisco » 8101-32fh » Version: N/A
When used together with: Cisco » 8101-32h » Version: N/A
When used together with: Cisco » 8102-64h » Version: N/A
When used together with: Cisco » 8201 » Version: N/A
When used together with: Cisco » 8201-32fh » Version: N/A
When used together with: Cisco » 8202 » Version: N/A
When used together with: Cisco » 8208 » Version: N/A
When used together with: Cisco » 8212 » Version: N/A
When used together with: Cisco » 8218 » Version: N/A
When used together with: Cisco » 8800 12-slot » Version: N/A
When used together with: Cisco » 8800 18-slot » Version: N/A
When used together with: Cisco » 8800 4-slot » Version: N/A
When used together with: Cisco » 8800 8-slot » Version: N/A
When used together with: Cisco » 8804 » Version: N/A
When used together with: Cisco » 8808 » Version: N/A
When used together with: Cisco » 8812 » Version: N/A
When used together with: Cisco » 8818 » Version: N/A
When used together with: Cisco » 8831 » Version: N/A
When used together with: Cisco » 9800-40 » Version: N/A
When used together with: Cisco » 9800-80 » Version: N/A
When used together with: Cisco » 9800-cl » Version: N/A
When used together with: Cisco » 9800-l » Version: N/A
When used together with: Cisco » Asr 1000 » Version: N/A
When used together with: Cisco » Asr 1000-esp100 » Version: N/A
When used together with: Cisco » Asr 1000-esp100-x » Version: N/A
When used together with: Cisco » Asr 1000-esp200-x » Version: N/A
When used together with: Cisco » Asr 1000-x » Version: N/A
When used together with: Cisco » Asr 1001 » Version: N/A
When used together with: Cisco » Asr 1001-hx » Version: N/A
When used together with: Cisco » Asr 1001-hx R » Version: N/A
When used together with: Cisco » Asr 1001-x » Version: N/A
When used together with: Cisco » Asr 1001-x R » Version: N/A
When used together with: Cisco » Asr 1002 » Version: N/A
When used together with: Cisco » Asr 1002-hx » Version: N/A
When used together with: Cisco » Asr 1002-hx R » Version: N/A
When used together with: Cisco » Asr 1002-x » Version: N/A
When used together with: Cisco » Asr 1002-x R » Version: N/A
When used together with: Cisco » Asr 1004 » Version: N/A
When used together with: Cisco » Asr 1006 » Version: N/A
When used together with: Cisco » Asr 1006-x » Version: N/A
When used together with: Cisco » Asr 1009-x » Version: N/A
When used together with: Cisco » Asr 1013 » Version: N/A
When used together with: Cisco » Asr 1023 » Version: N/A
When used together with: Cisco » Catalyst 3850 » Version: N/A
When used together with: Cisco » Catalyst 3850-12s-e » Version: N/A
When used together with: Cisco » Catalyst 3850-12s-s » Version: N/A
When used together with: Cisco » Catalyst 3850-12x48u » Version: N/A
When used together with: Cisco » Catalyst 3850-12xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-12xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-16xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-16xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24pw-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24s-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24s-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24u » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-s » Version: N/A
When used together with: Cisco » Catalyst 3850-32xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-32xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48p-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48p-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48p-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48pw-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48t-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48t-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48t-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48u » Version: N/A
When used together with: Cisco » Catalyst 3850-48u-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48u-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48u-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-f-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-f-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-nm-2-40g » Version: N/A
When used together with: Cisco » Catalyst 3850-nm-8-10g » Version: N/A
When used together with: Cisco » Catalyst 8200 » Version: N/A
When used together with: Cisco » Catalyst 8300 » Version: N/A
When used together with: Cisco » Catalyst 8300-1n1s-4t2x » Version: N/A
When used together with: Cisco » Catalyst 8300-1n1s-6t » Version: N/A
When used together with: Cisco » Catalyst 8300-2n2s-4t2x » Version: N/A
When used together with: Cisco » Catalyst 8300-2n2s-6t » Version: N/A
When used together with: Cisco » Catalyst 8500 » Version: N/A
When used together with: Cisco » Catalyst 8500-4qc » Version: N/A
When used together with: Cisco » Catalyst 8500l » Version: N/A
When used together with: Cisco » Catalyst 8510csr » Version: N/A
When used together with: Cisco » Catalyst 8510msr » Version: N/A
When used together with: Cisco » Catalyst 8540csr » Version: N/A
When used together with: Cisco » Catalyst 8540msr » Version: N/A
When used together with: Cisco » Catalyst 9200 » Version: N/A
When used together with: Cisco » Catalyst 9200cx » Version: N/A
When used together with: Cisco » Catalyst 9200l » Version: N/A
When used together with: Cisco » Catalyst 9300 » Version: N/A
When used together with: Cisco » Catalyst 9300-24p-a » Version: N/A
When used together with: Cisco » Catalyst 9300-24p-e » Version: N/A
When used together with: Cisco » Catalyst 9300-24s-a » Version: N/A
When used together with: Cisco » Catalyst 9300-24s-e » Version: N/A
When used together with: Cisco » Catalyst 9300-24t-a » Version: N/A
When used together with: Cisco » Catalyst 9300-24t-e » Version: N/A
When used together with: Cisco » Catalyst 9300-24u-a » Version: N/A
When used together with: Cisco » Catalyst 9300-24u-e » Version: N/A
When used together with: Cisco » Catalyst 9300-24ux-a » Version: N/A
When used together with: Cisco » Catalyst 9300-24ux-e » Version: N/A
When used together with: Cisco » Catalyst 9300-48p-a » Version: N/A
When used together with: Cisco » Catalyst 9300-48p-e » Version: N/A
When used together with: Cisco » Catalyst 9300-48s-a » Version: N/A
When used together with: Cisco » Catalyst 9300-48s-e » Version: N/A
When used together with: Cisco » Catalyst 9300-48t-a » Version: N/A
When used together with: Cisco » Catalyst 9300-48t-e » Version: N/A
When used together with: Cisco » Catalyst 9300-48u-a » Version: N/A
When used together with: Cisco » Catalyst 9300-48u-e » Version: N/A
When used together with: Cisco » Catalyst 9300-48un-a » Version: N/A
When used together with: Cisco » Catalyst 9300-48un-e » Version: N/A
When used together with: Cisco » Catalyst 9300-48uxm-a » Version: N/A
When used together with: Cisco » Catalyst 9300-48uxm-e » Version: N/A
When used together with: Cisco » Catalyst 9300l » Version: N/A
When used together with: Cisco » Catalyst 9300l-24p-4g-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-24p-4g-e » Version: N/A
When used together with: Cisco » Catalyst 9300l-24p-4x-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-24p-4x-e » Version: N/A
When used together with: Cisco » Catalyst 9300l-24t-4g-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-24t-4g-e » Version: N/A
When used together with: Cisco » Catalyst 9300l-24t-4x-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-24t-4x-e » Version: N/A
When used together with: Cisco » Catalyst 9300l-48p-4g-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-48p-4g-e » Version: N/A
When used together with: Cisco » Catalyst 9300l-48p-4x-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-48p-4x-e » Version: N/A
When used together with: Cisco » Catalyst 9300l-48t-4g-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-48t-4g-e » Version: N/A

Max 200 conditions are displayed on this page, to prevent potential performance issues, please refer to NVD for more details.

CVE-2018-0154 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial-of-service (DoS) condition.

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2018-0154

Added on 2022-03-03 Action due date 2022-03-17

Exploit prediction scoring system (EPSS) score for CVE-2018-0154

EPSS FAQ

1.95%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 88 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-0154

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST	2024-07-16
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2018-0154

CWE-399

Assigned by: ykramarz@cisco.com (Secondary)

References for CVE-2018-0154