CVE-2018-0209
Summary
| CVE | CVE-2018-0209 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-03-08 07:29:00 UTC |
| Updated | 2020-10-22 16:13:00 UTC |
| Description | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem communication channel through the Cisco 550X Series Stackable Managed Switches could allow an authenticated, remote attacker to cause the device to reload unexpectedly, causing a denial of service (DoS) condition. The device nay need to be manually reloaded to recover. The vulnerability is due to lack of proper input throttling of ingress SNMP traffic over an internal interface. An attacker could exploit this vulnerability by sending a crafted, heavy stream of SNMP traffic to the targeted device. An exploit could allow the attacker to cause the device to reload unexpectedly, causing a DoS condition. Cisco Bug IDs: CSCvg22135. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | Sf500-24 | - | All | All | All |
| Hardware | Cisco | Sf500-24 | - | All | All | All |
| Hardware | Cisco | Sf500-24mp | - | All | All | All |
| Hardware | Cisco | Sf500-24mp | - | All | All | All |
| Hardware | Cisco | Sf500-24p | - | All | All | All |
| Hardware | Cisco | Sf500-24p | - | All | All | All |
| Hardware | Cisco | Sf500-48 | - | All | All | All |
| Hardware | Cisco | Sf500-48 | - | All | All | All |
| Hardware | Cisco | Sf500-48mp | - | All | All | All |
| Hardware | Cisco | Sf500-48mp | - | All | All | All |
| Hardware | Cisco | Sf500-48p | - | All | All | All |
| Hardware | Cisco | Sf500-48p | - | All | All | All |
| Hardware | Cisco | Sg500-28 | - | All | All | All |
| Hardware | Cisco | Sg500-28 | - | All | All | All |
| Hardware | Cisco | Sg500-28mpp | - | All | All | All |
| Hardware | Cisco | Sg500-28mpp | - | All | All | All |
| Hardware | Cisco | Sg500-28p | - | All | All | All |
| Hardware | Cisco | Sg500-28p | - | All | All | All |
| Hardware | Cisco | Sg500-52 | - | All | All | All |
| Hardware | Cisco | Sg500-52 | - | All | All | All |
| Hardware | Cisco | Sg500-52mp | - | All | All | All |
| Hardware | Cisco | Sg500-52mp | - | All | All | All |
| Hardware | Cisco | Sg500-52p | - | All | All | All |
| Hardware | Cisco | Sg500-52p | - | All | All | All |
| Hardware | Cisco | Sg500x-24 | - | All | All | All |
| Hardware | Cisco | Sg500x-24 | - | All | All | All |
| Hardware | Cisco | Sg500x-24mpp | - | All | All | All |
| Hardware | Cisco | Sg500x-24mpp | - | All | All | All |
| Hardware | Cisco | Sg500x-24p | - | All | All | All |
| Hardware | Cisco | Sg500x-24p | - | All | All | All |
| Hardware | Cisco | Sg500x-48 | - | All | All | All |
| Hardware | Cisco | Sg500x-48 | - | All | All | All |
| Hardware | Cisco | Sg500x-48mp | - | All | All | All |
| Hardware | Cisco | Sg500x-48mp | - | All | All | All |
| Hardware | Cisco | Sg500x-48p | - | All | All | All |
| Hardware | Cisco | Sg500x-48p | - | All | All | All |
| Hardware | Cisco | Sg500xg-8f8t | - | All | All | All |
| Hardware | Cisco | Sg500xg-8f8t | - | All | All | All |
| Operating System | Cisco | Small Business 500 Series Stackable Managed Switches Firmware | 2.2.5.68 | All | All | All |
| Operating System | Cisco | Small Business 500 Series Stackable Managed Switches Firmware | 2.3.0.130 | All | All | All |
| Operating System | Cisco | Small Business 500 Series Stackable Managed Switches Firmware | 2.2.5.68 | All | All | All |
| Operating System | Cisco | Small Business 500 Series Stackable Managed Switches Firmware | 2.3.0.130 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco 550X Series Stackable Managed Switches CVE-2018-0209 Denial of Service Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Cisco 550X Series Stackable Managed Switches SNMP Denial of Service Vulnerability | CONFIRM | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.