CVE-2018-0136
Quick assessment
Affected
n/a Cisco Aggregation Services Router 9000 Series
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Aggregation Services Router（ASR）9000 Series是美国思科（Cisco）公司的9000系列无线控制器产品。Cisco IOS XR Software是其中的一套模块化、分布式的网络操作系统。 Cisco Aggregation Services Router (ASR) 9000 Series中的Cisco IOS XR Software 5.3.4版本的IPv6子系统存在拒绝服务漏洞，该漏洞源于程序没有正确的处理IPv6数据包。当路由器安装有基于Trid
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2018-0136
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router (ASR) 9000 Series could allow an unauthenticated, remote attacker to trigger a reload of one or more Trident-based line cards, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect handling of IPv6 packets with a fragment header extension. An attacker could exploit this vulnerability by sending IPv6 packets designed to trigger the issue either to or through the Trident-based line card. A successful exploit could allow the attacker to trigger a reload of Trident-based line cards, resulting in a DoS during the period of time the line card takes to restart. This vulnerability affects Cisco Aggregation Services Router (ASR) 9000 Series when the following conditions are met: The router is running Cisco IOS XR Software Release 5.3.4, and the router has installed Trident-based line cards that have IPv6 configured. A software maintenance upgrade (SMU) has been made available that addresses this vulnerability. The fix has also been incorporated into service pack 7 for Cisco IOS XR Software Release 5.3.4. Cisco Bug IDs: CSCvg46800.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Aggregation Services Router 9000 Series Cisco IOS XR Software 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Aggregation Services Router（ASR）9000 Series是美国思科（Cisco）公司的9000系列无线控制器产品。Cisco IOS XR Software是其中的一套模块化、分布式的网络操作系统。 Cisco Aggregation Services Router (ASR) 9000 Series中的Cisco IOS XR Software 5.3.4版本的IPv6子系统存在拒绝服务漏洞，该漏洞源于程序没有正确的处理IPv6数据包。当路由器安装有基于Trid
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Cisco Aggregation Services Router 9000 Series | Cisco Aggregation Services Router 9000 Series | - |
|
II. Public POCs for CVE-2018-0136
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-0136
请登录查看更多情报信息。
Vendor Advisories for CVE-2018-0136 (2)
Same Patch Batch · n/a · 2018-01-31 · 30 CVEs total
| CVE-2018-6475 | SUPERAntiSpyware Professional Trial 安全漏洞 | |
| CVE-2018-6412 | Linux kernel 安全漏洞 | |
| CVE-2018-1000001 | GNU glibc 权限许可和访问控制问题漏洞 | |
| CVE-2017-1000411 | OpenDaylight OpenFlow Plugin和Controller 安全漏洞 | |
| CVE-2018-6384 | NSClient++ 安全漏洞 | |
| CVE-2017-8916 | Center for Internet Security CIS-CAT Pro Dashboard 访问控制错误漏洞 | |
| CVE-2018-6460 | Hotspot Shield 安全漏洞 | |
| CVE-2018-6465 | WordPress PropertyHive插件跨站脚本漏洞 | |
| CVE-2018-6464 | Simditor 跨站脚本漏洞 | |
| CVE-2018-6462 | Tracker PDF-XChange Viewer和Viewer AX SDK 安全漏洞 | |
| CVE-2018-5996 | 7-Zip和p7zip 安全漏洞 | |
| CVE-2018-5701 | Iolo System Shield AntiVirus and AntiSpyware 安全漏洞 | |
| CVE-2014-1632 | Eventum 安全漏洞 | |
| CVE-2014-1631 | Eventum 安全漏洞 | |
| CVE-2018-6476 | SUPERAntiSpyware Professional Trial SASKUTIL.SYS驱动程序安全漏洞 | |
| CVE-2018-6374 | Pulse Secure Desktop Linux clients GUI组件安全漏洞 | |
| CVE-2018-6474 | SUPERAntiSpyware Professional Trial 安全漏洞 | |
| CVE-2018-6473 | SUPERAntiSpyware Professional Trial 安全漏洞 | |
| CVE-2018-6472 | SUPERAntiSpyware Professional Trial 安全漏洞 | |
| CVE-2018-6471 | SUPERAntiSpyware Professional Trial 安全漏洞 |
Showing top 20 of 30 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same weakness: CWE-20
V. Comments for CVE-2018-0136
No comments yet