5
CVSSv2

CVE-2018-0286

Published: 02/05/2018 Updated: 09/09/2020
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

A vulnerability in the netconf interface of Cisco IOS XR Software could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition on affected system. The vulnerability is due to improper handling of malformed requests processed by the netconf process. An attacker could exploit this vulnerability by sending malicious requests to the affected software. An exploit could allow the malicious user to cause the targeted process to restart, resulting in a DoS condition on the affected system. Cisco Bug IDs: CSCvg95792.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios xr 6.3.1

cisco ios xr 6.3.2

cisco ios xr 6.5.1

Vendor Advisories

A vulnerability in the netconf interface of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on affected system The vulnerability is due to improper handling of malformed requests processed by the netconf process An attacker could exploit this vulnerability by sending malicious req ...