CVE-2018-0163

A vulnerability in the 802.1x multiple-authentication (multi-auth) feature of Cisco IOS Software could allow an unauthenticated, adjacent attacker to bypass the authentication phase on an 802.1x multi-auth port. The vulnerability is due to a logic change error introduced into the code. An attacker could exploit this vulnerability by trying to access an 802.1x multi-auth port after a successful supplicant has authenticated. An exploit could allow the attacker to bypass the 802.1x access controls and obtain access to the network. Cisco Bug IDs: CSCvg69701.

• CWE-287
• CWE-287

• http://www.securityfocus.com/bid/103571Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dot1xVendor Advisory
• http://www.securityfocus.com/bid/103571Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dot1xVendor Advisory

Published

Mar 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0156A vulnerability in the Smart Install feature of Cisco IOS So…7.5
• CVE-2018-0157A vulnerability in the Zone-Based Firewall code of Cisco IOS…8.6
• CVE-2018-0158A vulnerability in the Internet Key Exchange Version 2 (IKEv…8.6
• CVE-2018-0159A vulnerability in the implementation of Internet Key Exchan…7.5
• CVE-2018-0160A vulnerability in Simple Network Management Protocol (SNMP)…
• CVE-2018-0161A vulnerability in the Simple Network Management Protocol (S…6.3
• CVE-2018-0164A vulnerability in the Switch Integrated Security Features o…
• CVE-2018-0165A vulnerability in the Internet Group Management Protocol (I…
• CVE-2018-0167Multiple Buffer Overflow vulnerabilities in the Link Layer D…8.8
• CVE-2018-0169Multiple vulnerabilities in the CLI parser of Cisco IOS XE S…
• CVE-2018-0170A vulnerability in the Cisco Umbrella Integration feature of…7.5
• CVE-2018-0171A vulnerability in the Smart Install feature of Cisco IOS So…9.8