CVE-2018-0378

Name: CVE-2018-0378
Creator: NVD / NIST
Published: 2018-10-17T21:49:52.787+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 4.48%

Last modified Jun 17, 2026

CVE-2018-0378 is a vulnerability of currently unknown severity. A vulnerability in the Precision Time Protocol (PTP) feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of protection against PTP frame flood attacks. EPSS estimates a 4.48% chance of exploitation in the next 30 days.

Description

A vulnerability in the Precision Time Protocol (PTP) feature of Cisco Nexus 5500, 5600, and 6000 Series Switches running Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of protection against PTP frame flood attacks. An attacker could exploit this vulnerability by sending large streams of malicious IPv4 or IPv6 PTP traffic to the affected device. A successful exploit could allow the attacker to cause a DoS condition, impacting the traffic passing through the device.

Metrics

EPSS Probability

4.48%

90.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Cisco	Nx-Os	7.3\(2\)n1\(0.8\)

References

http://www.securityfocus.com/bid/105669Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041920Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-nexus-ptp-dosVendor Advisory
http://www.securityfocus.com/bid/105669Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1041920Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-nexus-ptp-dosVendor Advisory

Timeline

Published: Oct 17, 2018
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-0378?

How severe is CVE-2018-0378?

Severity scoring for CVE-2018-0378 is pending analysis. The EPSS model estimates a 4.48% probability of exploitation in the next 30 days.

How do I fix CVE-2018-0378?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-0378?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST