CVE-2018-0305 describes a denial-of-service vulnerability in the Cisco Fabric Services component of Cisco FXOS and NX-OS Software. This flaw, caused by insufficient validation of Cisco Fabric Services packets, affects numerous Cisco Firepower, MDS, Nexus, and UCS product lines when configured to use Cisco Fabric Services. An unauthenticated, remote attacker can exploit this by sending a crafted packet, leading to a NULL pointer dereference and a denial-of-service condition. The vulnerability carries a high CVSSv3 score of 8.6, indicating a critical risk. It is remotely exploitable with low attack complexity and no user interaction required, allowing an attacker to achieve a complete loss of availability for affected devices. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
8.0\(1\)CPE matchmatch criteria | cpe:2.3:o:cisco:nexus_7000_firmware:8.0\(1\):*:*:*:*:*:*:* | ||
7.0\(0\)hsk\(0.357\)CPE matchmatch criteria | cpe:2.3:o:cisco:nexus_5000_firmware:7.0\(0\)hsk\(0.357\):*:*:*:*:*:*:* | ||
8.1\(0.2\)s0CPE matchmatch criteria | cpe:2.3:o:cisco:nexus_5000_firmware:8.1\(0.2\)s0:*:*:*:*:*:*:* | ||
8.8\(0.1\)CPE matchmatch criteria | cpe:2.3:o:cisco:nexus_5000_firmware:8.8\(0.1\):*:*:*:*:*:*:* | ||
r211CPE matchmatch criteria | cpe:2.3:o:cisco:firepower_9000_firmware:r211:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.