CVE-2018-15372

A vulnerability in the MACsec Key Agreement (MKA) using Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) functionality of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to bypass authentication and pass traffic through a Layer 3 interface of an affected device. The vulnerability is due to a logic error in the affected software. An attacker could exploit this vulnerability by connecting to and passing traffic through a Layer 3 interface of an affected device, if the interface is configured for MACsec MKA using EAP-TLS and is running in access-session closed mode. A successful exploit could allow the attacker to bypass 802.1x network access controls and gain access to the network.

• CWE-284

• http://www.securityfocus.com/bid/105416Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-macsecVendor Advisory
• http://www.securityfocus.com/bid/105416Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-macsecVendor Advisory

Published

Oct 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15366A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalat…
• CVE-2018-15367A ctl_set KERedirect Untrusted Pointer Dereference Privilege…
• CVE-2018-15368A vulnerability in the CLI parser of Cisco IOS XE Software c…6.7
• CVE-2018-15369A vulnerability in the TACACS+ client subsystem of Cisco IOS…
• CVE-2018-15370A vulnerability in Cisco IOS ROM Monitor (ROMMON) Software f…
• CVE-2018-15371A vulnerability in the shell access request mechanism of Cis…
• CVE-2018-15373A vulnerability in the implementation of Cisco Discovery Pro…
• CVE-2018-15374A vulnerability in the Image Verification feature of Cisco I…
• CVE-2018-15375A vulnerability in the embedded test subsystem of Cisco IOS …
• CVE-2018-15376A vulnerability in the embedded test subsystem of Cisco IOS …
• CVE-2018-15377A vulnerability in the Cisco Network Plug and Play agent, al…8.6
• CVE-2018-15378A vulnerability in ClamAV versions prior to 0.100.2 could al…