CVE-2018-0418

A vulnerability in the Local Packet Transport Services (LPTS) feature set of Cisco ASR 9000 Series Aggregation Services Router Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a lack of input and validation checking on certain Precision Time Protocol (PTP) ingress traffic to an affected device. An attacker could exploit this vulnerability by injecting malformed traffic into an affected device. A successful exploit could allow the attacker to cause services on the device to become unresponsive, resulting in a DoS condition. Cisco Bug IDs: CSCvj22858.

• CWE-400
• CWE-20

• http://www.securityfocus.com/bid/105185Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041538Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-asr-ptp-dosVendor Advisory
• http://www.securityfocus.com/bid/105185Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041538Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-asr-ptp-dosVendor Advisory

Published

Aug 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0412A vulnerability in the implementation of Extensible Authenti…
• CVE-2018-0413A vulnerability in the web-based management interface of Cis…
• CVE-2018-0414A vulnerability in the web-based UI of Cisco Secure Access C…
• CVE-2018-0415A vulnerability in the implementation of Extensible Authenti…
• CVE-2018-0416A vulnerability in the web-based interface of Cisco Wireless…5.3
• CVE-2018-0417A vulnerability in TACACS authentication with Cisco Wireless…7.8
• CVE-2018-0419A vulnerability in certain attachment detection mechanisms o…
• CVE-2018-0420A vulnerability in the web-based interface of Cisco Wireless…6.5
• CVE-2018-0421A vulnerability in TCP connection management in Cisco Prime …
• CVE-2018-0422A vulnerability in the folder permissions of Cisco Webex Mee…
• CVE-2018-0423A vulnerability in the web-based management interface of the…
• CVE-2018-0424A vulnerability in the web-based management interface of the…8.8