Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2018-0480 | First vendor Publication | 2018-10-05 |
| Vendor | Cve | Last vendor Modification | 2019-10-09 |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H | |||
|---|---|---|---|
| Overall CVSS Score | 6.1 | ||
| Base Score | 6.1 | Environmental Score | 6.1 |
| impact SubScore | 4 | Temporal Score | 6.1 |
| Exploitabality Sub Score | 1.6 | ||
| Attack Vector | Adjacent | Attack Complexity | High |
| Privileges Required | None | User Interaction | None |
| Scope | Changed | Confidentiality Impact | None |
| Integrity Impact | None | Availability Impact | High |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:A/AC:M/Au:N/C:N/I:N/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 5.7 | Attack Range | Adjacent network |
| Cvss Impact Score | 6.9 | Attack Complexity | Medium |
| Cvss Expoit Score | 5.5 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| A vulnerability in the errdisable per VLAN feature of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause the device to crash, leading to a denial of service (DoS) condition. The vulnerability is due to a race condition that occurs when the VLAN and port enter an errdisabled state, resulting in an incorrect state in the software. An attacker could exploit this vulnerability by sending frames that trigger the errdisable condition. A successful exploit could allow the attacker to cause the affected device to crash, leading to a DoS condition. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0480 |
CWE : Common Weakness Enumeration
| % | Id | Name |
|---|---|---|
| 100 % | CWE-362 | Race Condition |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Os | 1 |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2018-10-05 | Name : The remote device is missing a vendor-supplied security patch. File : cisco-sa-20180926-errdisable.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
| Source | Url |
|---|---|
| BID | http://www.securityfocus.com/bid/105400 |
| CISCO | https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s... |
| SECTRACK | http://www.securitytracker.com/id/1041737 |
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 13:07:44 |
|
| 2021-04-22 02:21:13 |
|
| 2020-05-23 01:05:06 |
|
| 2019-10-10 05:20:13 |
|
| 2018-11-27 00:21:24 |
|
| 2018-10-07 17:19:23 |
|
| 2018-10-05 21:19:40 |
|
