Cyber Resilience

CVE-2018-0180

Cisco Ios 15.3\(00.00.19\)sy … 15.6\(01.22\)t

CISA KEVActive ExploitationEUVD Exploited
Published
28 March 2018
Modified
14 January 2026
KEV Added
03 March 2022
Patch / advisory
View advisory
CVSS Score v3.1 5.9
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.050 91th percentile
Risk Priority 75 floored blend · peak EPSS

Summary

CVE-2018-0180 is a medium-severity an unspecified weakness vulnerability in Cisco Ios. Its CVSS base score is 5.9 (Medium).

Operationally, ranked in the top 9% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

The vulnerability CVE-2018-0180 consists of multiple flaws in the Login Enhancements (Login Block) feature of Cisco IOS Software. It affects Cisco devices running IOS releases 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later, and can produce a device reload that results in denial of service. The CVSS 3.1 base score is 5.9 with the vector AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H, and the issues are tracked under CWEs 399 and NVD-CWE-noinfo along with Cisco Bug IDs CSCuy32360 and CSCuz60599.

An unauthenticated remote attacker can trigger the reload by sending crafted traffic that exercises the affected login feature, achieving only availability impact with no confidentiality or integrity consequences. Successful exploitation requires the attacker to overcome the noted high attack complexity.

The referenced Cisco Security Advisory cisco-sa-20180328-slogin addresses the vulnerabilities, and the flaw appears in the CISA Known Exploited Vulnerabilities catalog.

EU & UK References

Vulnerability Data

Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices…

more

that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599.

CWE(s)
CWE-399NVD-CWE-noinfo
KEV Date Added
03 March 2022

Related Threats

CVEs Like This One

CVE-2018-0179Same product: Cisco 1000 Integrated Services Routerboth on KEV
CVE-2017-12237Same product: Cisco 1000 Integrated Services Routerboth on KEV
CVE-2017-12231Same product: Cisco 1100-4G\/6G Integrated Services Routerboth on KEV
CVE-2018-0154Same product: Cisco 1000 Integrated Services Routerboth on KEV
CVE-2017-12232Same product: Cisco 1000 Integrated Services Routerboth on KEV
CVE-2017-12240Same product: Cisco 1000 Integrated Services Routerboth on KEV
CVE-2017-12319Same product: Cisco 1000 Integrated Services Routerboth on KEV
CVE-2018-0161Same product: Cisco Iosboth on KEV
CVE-2017-12238Same product: Cisco Iosboth on KEV
CVE-2023-20273Same product: Cisco Catalyst 3650both on KEV

Affected Assets

cisco
ios
15.3\(00.00.19\)sy, 15.4\(01\)ia001.100, 15.4\(03\)m4.1, 15.4\(2\)cg, 15.4\(2\)t

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References