CVE-2018-15391 describes a denial-of-service vulnerability in Cisco Remote PHY Software, specifically affecting IPv4 fragment-processing functions. The flaw stems from insufficient validation of numerical values in IPv4 packets, allowing an unauthenticated, remote attacker to send malformed traffic. This can disrupt IPv4 traffic flow, leading to a DoS condition, and is rated High severity (CVSS 7.5). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
phyCPE matchmatch criteria | cpe:2.3:a:cisco:remote:phy:-:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.