Live › vulnerability › CVE-2018-0154
Go to dashboardA flaw in the crypto engine of Cisco's Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software lets a remote, unauthenticated attacker crash the device with a denial-of-service condition. The attacker gets an outage, not code execution or data access.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Cisco IOS Software | vendor | – | – |
Unknown from the sources.
Apply the Cisco IOS Software update per the vendor advisory (CISAs required action is apply updates per vendor instructions'); the fixed version is unknown from these sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient handling of VPN traffic by the affected device. An attacker could exploit this vulnerability by sending crafted VPN traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to hang or crash, resulting in a DoS condition. Cisco Bug IDs: CSCvd39267.
This page as .md · .json · in your agent: get_signal("CVE-2018-0154")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.