CVE-2018-0466
Last modified
CVE-2018-0466 is a vulnerability of currently unknown severity. A vulnerability in the Open Shortest Path First version 3 (OSPFv3) implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to incorrect handling of specific OSPFv3 packets. EPSS estimates a 0.95% chance of exploitation in the next 30 days.
Description
A vulnerability in the Open Shortest Path First version 3 (OSPFv3) implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to incorrect handling of specific OSPFv3 packets. An attacker could exploit this vulnerability by sending crafted OSPFv3 Link-State Advertisements (LSA) to an affected device. An exploit could allow the attacker to cause an affected device to reload, leading to a denial of service (DoS) condition.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | 16.2.1 |
| Cisco | Ios Xe | 16.2.1 |
References
- http://www.securityfocus.com/bid/105403Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041737Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/105403Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041737Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-0466?
How severe is CVE-2018-0466?
How do I fix CVE-2018-0466?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-0460A vulnerability in the REST API of Cisco Enterprise NFV Infr…
- CVE-2018-0461A vulnerability in the Cisco IP Phone 8800 Series Software c…6.5
- CVE-2018-0462A vulnerability in the user management functionality of Cisc…
- CVE-2018-0463A vulnerability in the Cisco Network Plug and Play server co…
- CVE-2018-0464A vulnerability in Cisco Data Center Network Manager softwar…
- CVE-2018-0465A vulnerability in the web-based management interface of Cis…
- CVE-2018-0467A vulnerability in the IPv6 processing code of Cisco IOS and…
- CVE-2018-0468A vulnerability in the configuration of a local database ins…
- CVE-2018-0469A vulnerability in the web user interface of Cisco IOS XE So…
- CVE-2018-0470A vulnerability in the web framework of Cisco IOS XE Softwar…
- CVE-2018-0471A vulnerability in the Cisco Discovery Protocol (CDP) module…7.4
- CVE-2018-0472A vulnerability in the IPsec driver code of multiple Cisco I…
Are you affected by CVE-2018-0466?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
