CVE-2018-0155 is a high-severity vulnerability affecting Cisco Catalyst 4500 Series and 4500-X Series Switches, stemming from insufficient error handling in the Bidirectional Forwarding Detection (BFD) offload implementation. An unauthenticated, remote attacker can exploit this by sending a crafted BFD message, causing the iosd process to crash and leading to a denial of service (DoS) condition, including a system reload. With a CVSS score of 8.6, this vulnerability is actively exploited in the wild, as indicated by its presence in the KEV catalog. Despite active exploitation, there is no public exploit code available in Metasploit or ExploitDB, though it has garnered significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.6\(2\)eCPE matchmatch criteria | cpe:2.3:o:cisco:ios:3.6\(2\)e:*:*:*:*:*:*:* | ||
3.6\(2\)eCPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe:3.6\(2\)e:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.