CVE-2018-0094

A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due to high CPU utilization on the targeted device. The vulnerability is due to insufficient rate limiting protection for IPv6 ingress traffic. An attacker could exploit this vulnerability by sending the affected device a high rate of IPv6 packets. Successful exploitation could allow the attacker to cause a DoS condition due to CPU and resource constraints. Cisco Bug IDs: CSCuv34544.

• CWE-693
• CWE-400

• http://www.securityfocus.com/bid/102787Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040249Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-ucsVendor Advisory
• http://www.securityfocus.com/bid/102787Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040249Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-ucsVendor Advisory

Published

Jan 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0088A vulnerability in one of the diagnostic test CLI commands o…
• CVE-2018-0089A vulnerability in the Policy and Charging Rules Function (P…
• CVE-2018-0090A vulnerability in management interface access control list …
• CVE-2018-0091A vulnerability in the web-based management interface of Cis…
• CVE-2018-0092A vulnerability in the network-operator user role implementa…
• CVE-2018-0093A vulnerability in the web-based management interface of Cis…
• CVE-2018-0095A vulnerability in the administrative shell of Cisco AsyncOS…
• CVE-2018-0096A vulnerability in the role-based access control (RBAC) func…
• CVE-2018-0097A vulnerability in the web interface of Cisco Prime Infrastr…
• CVE-2018-0098A vulnerability in the web-based management interface of Cis…
• CVE-2018-0099A vulnerability in the web management GUI of the Cisco D9800…
• CVE-2018-0100A vulnerability in the Profile Editor of the Cisco AnyConnec…