CVE-2018-0256
Quick assessment
Affected
n/a Cisco Packet Data Network Gateway
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Packet Data Network Gateway是美国思科（Cisco）公司的一款用于4G移动核心网络中的分组数据网络网关设备。 Cisco Packet Data Network Gateway中的对等网络消息处理存在输入验证漏洞，该漏洞源于程序没有正确的校验对等网络数据包头。远程攻击者可通过发送对等网络数据包利用该漏洞造成拒绝服务（Session Manager进程重启）。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2018-0256
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the peer-to-peer message processing functionality of Cisco Packet Data Network Gateway could allow an unauthenticated, remote attacker to cause the Session Manager (SESSMGR) process on an affected device to restart, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect validation of peer-to-peer packet headers. An attacker could exploit this vulnerability by sending a crafted peer-to-peer packet through an affected device. A successful exploit could allow the attacker to cause the SESSMGR process on the affected device to restart unexpectedly, which could briefly impact traffic while the SESSMGR process restarts and result in a DoS condition. Cisco Bug IDs: CSCvg88786.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
输入验证不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Packet Data Network Gateway 输入验证漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Packet Data Network Gateway是美国思科（Cisco）公司的一款用于4G移动核心网络中的分组数据网络网关设备。 Cisco Packet Data Network Gateway中的对等网络消息处理存在输入验证漏洞，该漏洞源于程序没有正确的校验对等网络数据包头。远程攻击者可通过发送对等网络数据包利用该漏洞造成拒绝服务（Session Manager进程重启）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Cisco Packet Data Network Gateway | Cisco Packet Data Network Gateway | - |
|
II. Public POCs for CVE-2018-0256
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-0256
请登录查看更多情报信息。
Vendor Advisories for CVE-2018-0256 (2)
Same Patch Batch · n/a · 2018-04-19 · 48 CVEs total
| CVE-2017-18261 | Linux kernel 安全漏洞 | |
| CVE-2018-10220 | Glastopf 安全漏洞 | |
| CVE-2018-10222 | idreamsoft iCMS 跨站请求伪造漏洞 | |
| CVE-2018-10227 | MiniCMS 跨站脚本漏洞 | |
| CVE-2018-9137 | Open-AudIT 安全漏洞 | |
| CVE-2018-2783 | 多款 Oracle 产品访问控制错误漏洞 | |
| CVE-2018-2831 | Oracle Virtualization VM VirtualBox组件安全漏洞 | |
| CVE-2018-2856 | Oracle Financial Services Applications Financial Services Basel Regulatory Capital Interna | |
| CVE-2018-10225 | thinkphp SQL注入漏洞 | |
| CVE-2018-10205 | hyperstart 安全漏洞 | |
| CVE-2018-10219 | baijiacms 安全漏洞 | |
| CVE-2018-10188 | phpMyAdmin 跨站请求伪造漏洞 | |
| CVE-2018-10230 | Zend Server Zend Debugger 跨站脚本漏洞 | |
| CVE-2018-9861 | Drupal CKEditor Enhanced Image插件跨站脚本漏洞 | |
| CVE-2018-10236 | POSCMS 安全漏洞 | |
| CVE-2018-10235 | POSCMS 安全漏洞 | |
| CVE-2018-0276 | Cisco WebEx Connect IM 跨站脚本漏洞 | |
| CVE-2018-0275 | Cisco Identity Services Engine 配置错误漏洞 | |
| CVE-2018-0273 | Cisco Aggregation Services Router 5000 Series Routers和Virtualized Packet Core System Softw | |
| CVE-2018-0272 | Cisco Firepower System Software Secure Sockets Layer引擎资源管理错误漏洞 |
Showing top 20 of 48 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same weakness: CWE-20
V. Comments for CVE-2018-0256
No comments yet