CVE-2018-0286: Medium severity cisco ios xrv 9000 vulnerability

Published May 2, 2018

Updated

A vulnerability in the netconf interface of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on affected system. The vulnerability is due to improper handling of malformed requests processed by the netconf process. An attacker could exploit this vulnerability by sending malicious requests to the affected software. An exploit could allow the attacker to cause the targeted process to restart, resulting in a DoS condition on the affected system. Cisco Bug IDs: CSCvg95792.

Affected Software

3 affected components

Cisco IOS XR=6.3.1

Cisco IOS XR=6.3.2

Cisco IOS XR=6.5.1

Event History

May 2, 2018

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0286?

CVE-2018-0286 is classified as a high severity vulnerability due to its potential to cause a denial of service condition.

How do I fix CVE-2018-0286?

To fix CVE-2018-0286, upgrade the affected Cisco IOS XR software to a version that addresses the vulnerability.

What systems are affected by CVE-2018-0286?

CVE-2018-0286 affects Cisco IOS XR versions 6.3.1, 6.3.2, and 6.5.1.

What type of attack does CVE-2018-0286 allow?

CVE-2018-0286 allows an unauthenticated, remote attacker to execute a denial of service attack on affected systems.

What causes the CVE-2018-0286 vulnerability?

The CVE-2018-0286 vulnerability is caused by improper handling of malformed requests in the netconf interface of Cisco IOS XR Software.