CVE-2018-15376 is a memory corruption vulnerability affecting Cisco IOS Software on Cisco 800 Series Industrial Integrated Services Routers. It allows an authenticated, local attacker to write arbitrary values to arbitrary memory locations due to the presence of unintended test commands. Rated Medium severity (CVSS 6.7), exploitation requires high privileges and local access, but can lead to complete compromise of confidentiality, integrity, and availability. There is no known public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
15.5\(2.21\)tCPE matchmatch criteria | cpe:2.3:o:cisco:ios:15.5\(2.21\)t:*:*:*:*:*:*:* | ||
15.6\(3\)mCPE matchmatch criteria | cpe:2.3:o:cisco:ios:15.6\(3\)m:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.