CVE-2018-0179

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated remote attacker to trigger a reload of an affected device. The issues affect Cisco devices running IOS Software releases 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later, and are tracked under Cisco Bug IDs CSCuy32360 and CSCuz60599. The CVSS 3.1 base score is 5.9 with the vector AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating a high impact on availability.

An unauthenticated remote attacker can exploit the flaws over the network to cause a denial-of-service condition by forcing the affected system to reload. The attack requires high complexity and does not need user interaction or credentials.

The Cisco Security Advisory cisco-sa-20180328-slogin addresses the issues, and the vulnerability appears in the CISA Known Exploited Vulnerabilities catalog, confirming observed in-the-wild exploitation.