Cisco IOS/IOS XE/IOS XR Software Multiple Remote Code Execution and Format String Vulnerabilities

Bugtraq ID:	103564
Class:	Input Validation Error
CVE:	CVE-2018-0167 CVE-2018-0175
Remote:	Yes
Local:	No
Published:	Mar 28 2018 12:00AM
Updated:	Mar 28 2018 12:00AM
Credit:	Cisco.
Vulnerable:	Cisco IOS XR Software 5.1.2 Cisco IOS XR Software 5.1.1 Cisco IOS XR Software 4.3 Cisco IOS XR Software 4.2 Cisco IOS XR Software 4.1 Cisco IOS XR Software 5.1.0 Cisco IOS XR Software 5.0.0 Cisco IOS XR Cisco IOS XE 0 Cisco Ios 15.4(3)M4.1 Cisco IOS 0
Not Vulnerable:	Cisco IOS XR Software 5.1.3

Cisco IOS/IOS XE/IOS XR Software Multiple Remote Code Execution and Format String Vulnerabilities

Cisco IOS/IOS XE/IOS XR Software are prone to multiple remote code-execution and multiple format-string vulnerabilities.

An attacker can exploit these issues to execute arbitrary code with elevated privileges within the context of an affected system. Failed exploit attempts may result in a denial of service conditions.

These issues are being tracked by Cisco Bug ID' s CSCuo17183, CSCvd73487 and CSCvd73664.

Cisco IOS/IOS XE/IOS XR Software Multiple Remote Code Execution and Format String Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].