CVE-2018-0273

A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet Core (VPC) System Software could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from being established, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of corrupted Internet Key Exchange Version 2 (IKEv2) messages. An attacker could exploit this vulnerability by sending crafted IKEv2 messages toward an affected router. A successful exploit could allow the attacker to cause the ipsecmgr service to reload. A reload of this service could cause all IPsec VPN tunnels to be terminated and prevent new tunnels from being established until the service has restarted, resulting in a DoS condition. This vulnerability affects the following Cisco products when they are running Cisco StarOS: Cisco Aggregation Services Router (ASR) 5000 Series Routers, Virtualized Packet Core (VPC) System Software. Cisco Bug IDs: CSCve29605.

• CWE-399

• http://www.securityfocus.com/bid/103935Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040721Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-starosasrVendor Advisory
• http://www.securityfocus.com/bid/103935Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040721Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-starosasrVendor Advisory

Published

Apr 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0267A vulnerability in the web framework of Cisco Unified Commun…6.5
• CVE-2018-0268A vulnerability in the container management subsystem of Cis…
• CVE-2018-0269A vulnerability in the web framework of the Cisco Digital Ne…4.3
• CVE-2018-0270A vulnerability in the web-based management interface of Cis…
• CVE-2018-0271A vulnerability in the API gateway of the Cisco Digital Netw…
• CVE-2018-0272A vulnerability in the Secure Sockets Layer (SSL) Engine of …
• CVE-2018-0274A vulnerability in the CLI parser of Cisco Network Services …8.8
• CVE-2018-0275A vulnerability in the support tunnel feature of Cisco Ident…
• CVE-2018-0276A vulnerability in Cisco WebEx Connect IM could allow an una…
• CVE-2018-0277A vulnerability in the Extensible Authentication Protocol-Tr…
• CVE-2018-0278A vulnerability in the management console of Cisco Firepower…6.5
• CVE-2018-0279A vulnerability in the Secure Copy Protocol (SCP) server of …8.8