Live › vulnerability › CVE-2018-0158
Go to dashboardA flaw in how Cisco IOS and IOS XE handle IKEv1 (Internet Key Exchange version 1) lets an unauthenticated remote attacker make the device reload. The result is a denial-of-service outage, and CISA lists it as exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Cisco IOS Software and Cisco IOS XE Software | vendor | – | – |
Unknown from the sources.
Apply the updates from Cisco per vendor instructions, as CISA requires; the fixed release versions are not in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service (DoS) condition. The vulnerability is due to incorrect processing of certain IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device to be processed. A successful exploit could cause an affected device to continuously consume memory and eventually reload, resulting in a DoS condition. Cisco Bug IDs: CSCvf22394.
This page as .md · .json · in your agent: get_signal("CVE-2018-0158")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.