Cisco IOS and IOS XE Software CVE-2018-0484 Security Bypass Vulnerability

Bugtraq ID:	106560
Class:	Design Error
CVE:	CVE-2018-0484
Remote:	Yes
Local:	No
Published:	Jan 09 2019 12:00AM
Updated:	Jan 09 2019 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS XE Software 0 Cisco Ios 16.6.4 Cisco Ios 16.6.2
Not Vulnerable:	Cisco Ios 16.6.5 Cisco Ios 16.6(4.12) Cisco Ios 15.8(3.1s)M Cisco Ios 15.8(3)M1

Cisco IOS and IOS XE Software CVE-2018-0484 Security Bypass Vulnerability

Cisco IOS and IOS XE Software are prone to a remote security-bypass vulnerability.

Successful exploits may allow an attacker to bypass certain security restrictions and to perform unauthorized actions; this may aid in launching further attacks.

This issue is being tracked by Cisco Bug ID CSCvk37852.

Cisco IOS and IOS XE Software CVE-2018-0484 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS and IOS XE Software CVE-2018-0484 Security Bypass Vulnerability

References:

• Cisco IOS Software (Cisco Systems)
  
• Cisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability (Cisco)