CVE-2018-0160

A vulnerability in Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to improper management of memory resources, referred to as a double free. An attacker could exploit this vulnerability by sending crafted SNMP packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. To exploit this vulnerability via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for an affected system. To exploit this vulnerability via SNMP Version 3, the attacker must know the user credentials for the affected system. This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS XE Software, have been configured to be queried over SNMP, and have Network Address Translation (NAT) enabled. Cisco Bug IDs: CSCve75818.

• CWE-415
• CWE-415

• http://www.securityfocus.com/bid/103575Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040584Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp-dosMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/103575Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040584Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp-dosMitigation, Vendor Advisory

Published

Mar 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0154A vulnerability in the crypto engine of the Cisco Integrated…7.5
• CVE-2018-0155A vulnerability in the Bidirectional Forwarding Detection (B…8.6
• CVE-2018-0156A vulnerability in the Smart Install feature of Cisco IOS So…7.5
• CVE-2018-0157A vulnerability in the Zone-Based Firewall code of Cisco IOS…8.6
• CVE-2018-0158A vulnerability in the Internet Key Exchange Version 2 (IKEv…8.6
• CVE-2018-0159A vulnerability in the implementation of Internet Key Exchan…7.5
• CVE-2018-0161A vulnerability in the Simple Network Management Protocol (S…6.3
• CVE-2018-0163A vulnerability in the 802.1x multiple-authentication (multi…6.5
• CVE-2018-0164A vulnerability in the Switch Integrated Security Features o…
• CVE-2018-0165A vulnerability in the Internet Group Management Protocol (I…
• CVE-2018-0167Multiple Buffer Overflow vulnerabilities in the Link Layer D…8.8
• CVE-2018-0169Multiple vulnerabilities in the CLI parser of Cisco IOS XE S…