Lucene search

CiscoCVE-2018-0476

HistoryOct 05, 2018 - 2:29 p.m.

CVE-2018-0476

2018-10-0514:29:05

CWE-399

cisco

web.nvd.nist.gov

cisco

ios xe

vulnerability

sip

nat

denial of service

dos

nvd

cve-2018-0476

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

70.0%

JSON

A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of SIP packets in transit while NAT is performed on an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending crafted SIP packets via UDP port 5060 through an affected device that is performing NAT for SIP packets. A successful exploit could allow an attacker to cause the device to reload, resulting in a denial of service (DoS) condition.

Affected configurations

Nvd

Node

ciscoios_xeMatch15.5\(3\)s5.1

ciscoios_xeMatch15.5\(3\)s6.1

ciscoios_xeMatch16.6.2

VendorProductVersionCPE
ciscoios_xe15.5(3)s5.1cpe:2.3:o:cisco:ios_xe:15.5\(3\)s5.1:*:*:*:*:*:*:*
ciscoios_xe15.5(3)s6.1cpe:2.3:o:cisco:ios_xe:15.5\(3\)s6.1:*:*:*:*:*:*:*
ciscoios_xe16.6.2cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe	15.5(3)s5.1	cpe:2.3:o:cisco:ios_xe:15.5\(3\)s5.1:::::::*
cisco	ios_xe	15.5(3)s6.1	cpe:2.3:o:cisco:ios_xe:15.5\(3\)s6.1:::::::*
cisco	ios_xe	16.6.2	cpe:2.3:o:cisco:ios_xe:16.6.2:::::::*

CNA Affected

[
  {
    "product": "Cisco IOS XE Software",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

www.securityfocus.com/bid/105419

www.securitytracker.com/id/1041734

www.securitytracker.com/id/1041737

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-sip-alg

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

70.0%

JSON

Related for CVE-2018-0476