CVE-2018-15428

A vulnerability in the implementation of Border Gateway Protocol (BGP) functionality in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain BGP update messages. An attacker could exploit this vulnerability by sending BGP update messages that include a specific, malformed attribute to be processed by an affected system. A successful exploit could allow the attacker to cause the BGP process to restart unexpectedly, resulting in a DoS condition. The Cisco implementation of BGP accepts incoming BGP traffic only from explicitly defined peers. To exploit this vulnerability, the malicious BGP update message would need to come from a configured, valid BGP peer, or would need to be injected by the attacker into the victim's BGP network on an existing, valid TCP connection to a BGP peer.

• CWE-20
• CWE-20

• http://www.securitytracker.com/id/1041790Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-iosxr-dosVendor Advisory
• http://www.securitytracker.com/id/1041790Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-iosxr-dosVendor Advisory

Published

Oct 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15422A vulnerability in the Cisco Webex Network Recording Player …7.8
• CVE-2018-15423A vulnerability in the web UI of Cisco HyperFlex Software co…4.7
• CVE-2018-15424A vulnerability in the web-based management interface of Cis…4.7
• CVE-2018-15425A vulnerability in the web-based management interface of Cis…4.7
• CVE-2018-15426A vulnerability in the web-based interface of Cisco Unity Co…
• CVE-2018-15427A vulnerability in Cisco Video Surveillance Manager (VSM) So…
• CVE-2018-15429A vulnerability in the web-based UI of Cisco HyperFlex HX Da…5.3
• CVE-2018-1543IBM WebSphere MQ 8.0 and 9.0 could allow a remote attacker t…5.9
• CVE-2018-15430A vulnerability in the administrative web interface of Cisco…
• CVE-2018-15431A vulnerability in the Cisco Webex Network Recording Player …7.3
• CVE-2018-15432A vulnerability in the server backup function of Cisco Prime…
• CVE-2018-15433A vulnerability in the server backup function of Cisco Prime…