CVE-2018-0179 : Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisc

Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599.

Published 2018-03-28 22:29:01

Updated 2025-01-27 21:04:37

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2018-0179

Cisco » IOS » Version: 15.4(2)t
cpe:2.3:o:cisco:ios:15.4\(2\)t:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 15.4(3)m
cpe:2.3:o:cisco:ios:15.4\(3\)m:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 15.4(2)cg
cpe:2.3:o:cisco:ios:15.4\(2\)cg:*:*:*:*:*:*:*
Matching versions
Cisco » IOS » Version: 15.3(00.00.19)sy
cpe:2.3:o:cisco:ios:15.3\(00.00.19\)sy:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 3925 Integrated Services Router » Version: N/A
When used together with: Cisco » 3925e Integrated Services Router » Version: N/A
When used together with: Cisco » 3945 Integrated Services Router » Version: N/A
When used together with: Cisco » 3945e Integrated Services Router » Version: N/A
Cisco » IOS » Version: 15.4(01)ia001.100
cpe:2.3:o:cisco:ios:15.4\(01\)ia001.100:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 3925 Integrated Services Router » Version: N/A
When used together with: Cisco » 3925e Integrated Services Router » Version: N/A
When used together with: Cisco » 3945 Integrated Services Router » Version: N/A
When used together with: Cisco » 3945e Integrated Services Router » Version: N/A
Cisco » IOS » Version: 15.6(01.22)t
cpe:2.3:o:cisco:ios:15.6\(01.22\)t:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 3925 Integrated Services Router » Version: N/A
When used together with: Cisco » 3925e Integrated Services Router » Version: N/A
When used together with: Cisco » 3945 Integrated Services Router » Version: N/A
When used together with: Cisco » 3945e Integrated Services Router » Version: N/A
Cisco » IOS » Version: 15.4(03)m4.1
cpe:2.3:o:cisco:ios:15.4\(03\)m4.1:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » 1000 Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4g/6g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltegb Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4gltena Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-6g Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1100-lte Integrated Services Router » Version: N/A
When used together with: Cisco » 1100 Integrated Services Router » Version: N/A
When used together with: Cisco » 1101-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1101 Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-2p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109-4p Integrated Services Router » Version: N/A
When used together with: Cisco » 1109 Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x-8p Integrated Services Router » Version: N/A
When used together with: Cisco » 1111x Integrated Services Router » Version: N/A
When used together with: Cisco » 111x Integrated Services Router » Version: N/A
When used together with: Cisco » 1120 Integrated Services Router » Version: N/A
When used together with: Cisco » 1131 Integrated Services Router » Version: N/A
When used together with: Cisco » 1160 Integrated Services Router » Version: N/A
When used together with: Cisco » 1801 Integrated Service Router » Version: N/A
When used together with: Cisco » 1802 Integrated Service Router » Version: N/A
When used together with: Cisco » 1803 Integrated Service Router » Version: N/A
When used together with: Cisco » 1811 Integrated Service Router » Version: N/A
When used together with: Cisco » 1812 Integrated Service Router » Version: N/A
When used together with: Cisco » 1841 Integrated Service Router » Version: N/A
When used together with: Cisco » 1861 Integrated Service Router » Version: N/A
When used together with: Cisco » 1905 Integrated Services Router » Version: N/A
When used together with: Cisco » 1906c Integrated Services Router » Version: N/A
When used together with: Cisco » 1921 Integrated Services Router » Version: N/A
When used together with: Cisco » 1941 Integrated Services Router » Version: N/A
When used together with: Cisco » 1941w Integrated Services Router » Version: N/A
When used together with: Cisco » 4000 Integrated Services Router » Version: N/A
When used together with: Cisco » 422 Integrated Services Router » Version: N/A
When used together with: Cisco » 4221 Integrated Services Router » Version: N/A
When used together with: Cisco » 4321/k9-rf Integrated Services Router » Version: N/A
When used together with: Cisco » 4321/k9-ws Integrated Services Router » Version: N/A
When used together with: Cisco » 4321/k9 Integrated Services Router » Version: N/A
When used together with: Cisco » 4321 Integrated Services Router » Version: N/A
When used together with: Cisco » 4331/k9-rf Integrated Services Router » Version: N/A
When used together with: Cisco » 4331/k9-ws Integrated Services Router » Version: N/A
When used together with: Cisco » 4331/k9 Integrated Services Router » Version: N/A
When used together with: Cisco » 4331 Integrated Services Router » Version: N/A
When used together with: Cisco » 4351/k9-rf Integrated Services Router » Version: N/A
When used together with: Cisco » 4351/k9-ws Integrated Services Router » Version: N/A
When used together with: Cisco » 4351/k9 Integrated Services Router » Version: N/A
When used together with: Cisco » 4431 Integrated Services Router » Version: N/A
When used together with: Cisco » 44461 Integrated Services Router » Version: N/A
When used together with: Cisco » 4451-x Integrated Services Router » Version: N/A
When used together with: Cisco » 4451 Integrated Services Router » Version: N/A
When used together with: Cisco » 4461 Integrated Services Router » Version: N/A
When used together with: Cisco » 8101-32fh » Version: N/A
When used together with: Cisco » 8101-32h » Version: N/A
When used together with: Cisco » 8102-64h » Version: N/A
When used together with: Cisco » 8201 » Version: N/A
When used together with: Cisco » 8201-32fh » Version: N/A
When used together with: Cisco » 8202 » Version: N/A
When used together with: Cisco » 8208 » Version: N/A
When used together with: Cisco » 8212 » Version: N/A
When used together with: Cisco » 8218 » Version: N/A
When used together with: Cisco » 8800 12-slot » Version: N/A
When used together with: Cisco » 8800 18-slot » Version: N/A
When used together with: Cisco » 8800 4-slot » Version: N/A
When used together with: Cisco » 8800 8-slot » Version: N/A
When used together with: Cisco » 8804 » Version: N/A
When used together with: Cisco » 8808 » Version: N/A
When used together with: Cisco » 8812 » Version: N/A
When used together with: Cisco » 8818 » Version: N/A
When used together with: Cisco » 8831 » Version: N/A
When used together with: Cisco » Asr 1000 » Version: N/A
When used together with: Cisco » Asr 1000-esp100 » Version: N/A
When used together with: Cisco » Asr 1000-esp100-x » Version: N/A
When used together with: Cisco » Asr 1000-esp200-x » Version: N/A
When used together with: Cisco » Asr 1000-x » Version: N/A
When used together with: Cisco » Asr 1001 » Version: N/A
When used together with: Cisco » Asr 1001-hx » Version: N/A
When used together with: Cisco » Asr 1001-hx R » Version: N/A
When used together with: Cisco » Asr 1001-x » Version: N/A
When used together with: Cisco » Asr 1001-x R » Version: N/A
When used together with: Cisco » Asr 1002 » Version: N/A
When used together with: Cisco » Asr 1002-hx » Version: N/A
When used together with: Cisco » Asr 1002-hx R » Version: N/A
When used together with: Cisco » Asr 1002-x » Version: N/A
When used together with: Cisco » Asr 1002-x R » Version: N/A
When used together with: Cisco » Asr 1004 » Version: N/A
When used together with: Cisco » Asr 1006 » Version: N/A
When used together with: Cisco » Asr 1006-x » Version: N/A
When used together with: Cisco » Asr 1009-x » Version: N/A
When used together with: Cisco » Asr 1013 » Version: N/A
When used together with: Cisco » Asr 1023 » Version: N/A
When used together with: Cisco » Catalyst 3650 » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-s » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq-s » Version: N/A
When used together with: Cisco » Catalyst 3850 » Version: N/A
When used together with: Cisco » Catalyst 3850-12s-e » Version: N/A
When used together with: Cisco » Catalyst 3850-12s-s » Version: N/A
When used together with: Cisco » Catalyst 3850-12x48u » Version: N/A
When used together with: Cisco » Catalyst 3850-12xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-12xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-16xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-16xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24pw-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24s-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24s-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24u » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-s » Version: N/A
When used together with: Cisco » Catalyst 3850-32xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-32xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-s » Version: N/A

Max 200 conditions are displayed on this page, to prevent potential performance issues, please refer to NVD for more details.

CVE-2018-0179 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Cisco IOS Software Denial-of-Service Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition.

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2018-0179

Added on 2022-03-03 Action due date 2022-03-17

Exploit prediction scoring system (EPSS) score for CVE-2018-0179

EPSS FAQ

2.39%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 84 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-0179

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.1	HIGH	AV:N/AC:M/Au:N/C:N/I:N/A:C	8.6	6.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete
5.9	MEDIUM	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	2.2	3.6	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High
5.9	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H	2.2	3.6	NIST	2024-07-24
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2018-0179

CWE-399
Assigned by:
- psirt@cisco.com (Secondary)
- ykramarz@cisco.com (Secondary)

References for CVE-2018-0179

http://www.securityfocus.com/bid/103556

Cisco IOS Login Enhancements Feature Multiple Denial of Service Vulnerabilities
Broken Link;Third Party Advisory;VDB Entry

CVEs referencing this url
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin

Cisco IOS Software Login Enhancements Login Block Denial of Service Vulnerabilities
Vendor Advisory

CVEs referencing this url