CVE-2018-0475

A vulnerability in the implementation of the cluster feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition on an affected device. The vulnerability is due to improper input validation when handling Cluster Management Protocol (CMP) messages. An attacker could exploit this vulnerability by sending a malicious CMP message to an affected device. A successful exploit could allow the attacker to cause the switch to crash and reload or to hang, resulting in a DoS condition. If the switch hangs it will not reboot automatically, and it will need to be power cycled manually to recover.

• CWE-20
• CWE-20

• http://www.securityfocus.com/bid/105404Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041737Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-cmpVendor Advisory
• http://www.securityfocus.com/bid/105404Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1041737Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-cmpVendor Advisory

Published

Oct 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0469A vulnerability in the web user interface of Cisco IOS XE So…
• CVE-2018-0470A vulnerability in the web framework of Cisco IOS XE Softwar…
• CVE-2018-0471A vulnerability in the Cisco Discovery Protocol (CDP) module…7.4
• CVE-2018-0472A vulnerability in the IPsec driver code of multiple Cisco I…
• CVE-2018-0473A vulnerability in the Precision Time Protocol (PTP) subsyst…
• CVE-2018-0474A vulnerability in the web-based management interface of Cis…8.8
• CVE-2018-0476A vulnerability in the Network Address Translation (NAT) Ses…
• CVE-2018-0477A vulnerability in the CLI parser of Cisco IOS XE Software c…6.7
• CVE-2018-0480A vulnerability in the errdisable per VLAN feature of Cisco …
• CVE-2018-0481A vulnerability in the CLI parser of Cisco IOS XE Software c…6.7
• CVE-2018-0482A vulnerability in the web-based management interface of Cis…5.4
• CVE-2018-0483A vulnerability in Cisco Jabber Client Framework (JCF) could…4.6