CVE-2018-0476: Cisco IOS XE Software NAT Session Initiation Protocol Application Layer Gateway Denial of Service Vulnerability
First published: Fri Oct 05 2018(Updated: )
A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of SIP packets in transit while NAT is performed on an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending crafted SIP packets via UDP port 5060 through an affected device that is performing NAT for SIP packets. A successful exploit could allow an attacker to cause the device to reload, resulting in a denial of service (DoS) condition.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE Web UI | =15.5\(3\)s5.1 | |
| Cisco IOS XE Web UI | =15.5\(3\)s6.1 | |
| Cisco IOS XE Web UI | =16.6.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0476?
CVE-2018-0476 is rated as a high-severity vulnerability due to its potential to cause device reloads.
How do I fix CVE-2018-0476?
To mitigate CVE-2018-0476, upgrade your Cisco IOS XE software to a version that is not affected by this vulnerability.
What devices are affected by CVE-2018-0476?
CVE-2018-0476 affects Cisco IOS XE versions 15.5(3)s5.1, 15.5(3)s6.1, and 16.6.2.
Can CVE-2018-0476 be exploited remotely?
Yes, CVE-2018-0476 can be exploited by an unauthenticated, remote attacker.
What impact does CVE-2018-0476 have on my network?
CVE-2018-0476 can lead to unexpected device reloads, potentially disrupting network services.
- agent/references
- agent/type
- agent/softwarecombine
- agent/weakness
- agent/severity
- agent/title
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe web ui
- version/cisco ios xe web ui/15.5\(3\)s5.1
- version/cisco ios xe web ui/15.5\(3\)s6.1
- version/cisco ios xe web ui/16.6.2