CVE-2018-0137

A vulnerability in the TCP throttling process of Cisco Prime Network could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient rate limiting protection for TCP listening ports. An attacker could exploit this vulnerability by sending the affected device a high rate of TCP SYN packets to the local IP address of the targeted application. A successful exploit could allow the attacker to cause the device to consume a high amount of memory and become slow, or to stop accepting new TCP connections to the application. Cisco Bug IDs: CSCvg48152.

• CWE-399
• CWE-770

• http://www.securityfocus.com/bid/102955Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-cpnVendor Advisory
• http://www.securityfocus.com/bid/102955Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-cpnVendor Advisory

Published

Feb 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0130A vulnerability in the use of JSON web tokens by the web-bas…
• CVE-2018-0131A vulnerability in the implementation of RSA-encrypted nonce…
• CVE-2018-0132A vulnerability in the forwarding information base (FIB) cod…
• CVE-2018-0134A vulnerability in the RADIUS authentication module of Cisco…5.3
• CVE-2018-0135A vulnerability in Cisco Unified Communications Manager coul…
• CVE-2018-0136A vulnerability in the IPv6 subsystem of Cisco IOS XR Softwa…8.6
• CVE-2018-0138A vulnerability in the detection engine of Cisco Firepower S…5.3
• CVE-2018-0139A vulnerability in the Interactive Voice Response (IVR) mana…8.6
• CVE-2018-0140A vulnerability in the spam quarantine of Cisco Email Securi…6.5
• CVE-2018-0141A vulnerability in Cisco Prime Collaboration Provisioning (P…
• CVE-2018-0143Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-0144A vulnerability in the web-based management interface of Cis…