CVE-2018-0472 is a high-severity vulnerability affecting Cisco IOS XE Software and ASA 5500-X Series Adaptive Security Appliances. It stems from improper processing of malformed IPsec Authentication Header (AH) or Encapsulating Security Payload (ESP) packets. An unauthenticated, remote attacker can exploit this flaw to trigger a device reload, leading to a denial of service. While no public exploit code or active exploitation is reported, the vulnerability has garnered some community discussion and media coverage, indicating awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
15.5\(3\)s5.36CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe:15.5\(3\)s5.36:*:*:*:*:*:*:* | ||
16.8.1CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.