CVE-2018-0159 : A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1)

A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of specific IKEv1 packets. An attacker could exploit this vulnerability by sending crafted IKEv1 packets to an affected device during an IKE negotiation. A successful exploit could allow the attacker to cause an affected device to reload, resulting in a DoS condition. Cisco Bug IDs: CSCuj73916.

Published 2018-03-28 22:29:01

Updated 2024-07-16 17:24:54

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2018-0159

Cisco » IOS » Version: 15.3(3)s
cpe:2.3:o:cisco:ios:15.3\(3\)s:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 901-12c-f-d » Version: N/A
When used together with: Cisco » Asr 901-12c-ft-d » Version: N/A
When used together with: Cisco » Asr 901-4c-f-d » Version: N/A
When used together with: Cisco » Asr 901-4c-ft-d » Version: N/A
When used together with: Cisco » Asr 901-6cz-f-a » Version: N/A
When used together with: Cisco » Asr 901-6cz-f-d » Version: N/A
When used together with: Cisco » Asr 901-6cz-ft-a » Version: N/A
When used together with: Cisco » Asr 901-6cz-ft-d » Version: N/A
When used together with: Cisco » Me 3600x-24cx-m » Version: N/A
When used together with: Cisco » Me 3600x-24fs-m » Version: N/A
When used together with: Cisco » Me 3600x-24ts-m » Version: N/A
When used together with: Cisco » Me 3800x-24fs-m » Version: N/A
Cisco » Ios Xe » Version: 15.3(3)s
cpe:2.3:o:cisco:ios_xe:15.3\(3\)s:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Asr 901-12c-f-d » Version: N/A
When used together with: Cisco » Asr 901-12c-ft-d » Version: N/A
When used together with: Cisco » Asr 901-4c-f-d » Version: N/A
When used together with: Cisco » Asr 901-4c-ft-d » Version: N/A
When used together with: Cisco » Asr 901-6cz-f-a » Version: N/A
When used together with: Cisco » Asr 901-6cz-f-d » Version: N/A
When used together with: Cisco » Asr 901-6cz-ft-a » Version: N/A
When used together with: Cisco » Asr 901-6cz-ft-d » Version: N/A
When used together with: Cisco » Me 3600x-24cx-m » Version: N/A
When used together with: Cisco » Me 3600x-24fs-m » Version: N/A
When used together with: Cisco » Me 3600x-24ts-m » Version: N/A
When used together with: Cisco » Me 3800x-24fs-m » Version: N/A

CVE-2018-0159 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2018-0159

Added on 2022-03-03 Action due date 2022-03-17

Exploit prediction scoring system (EPSS) score for CVE-2018-0159

EPSS FAQ

0.49%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 77 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-0159

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST	2024-07-16
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2018-0159

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Assigned by:
- nvd@nist.gov (Primary)
- ykramarz@cisco.com (Secondary)

References for CVE-2018-0159

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike-dos

Cisco IOS and IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability
Vendor Advisory
http://www.securitytracker.com/id/1040595

Cisco IOS/IOS XE IKE Processing Flaws Let Remote Users Cause the Target System to Reload - SecurityTracker
Broken Link;Third Party Advisory;VDB Entry

CVEs referencing this url
http://www.securityfocus.com/bid/103562

Cisco IOS and IOS XE Software CVE-2018-0159 Denial of Service Vulnerability
Broken Link;Third Party Advisory;VDB Entry