cisco-sa-20180926-pnp-memleak: Cisco IOS and IOS XE Software Plug and Play Agent Memory Leak Vulnerability
First published: Wed Sep 26 2018(Updated: )
A vulnerability in the Cisco Network Plug and Play agent, also referred to as the Cisco Open Plug-n-Play agent, of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak on an affected device. The vulnerability is due to insufficient input validation by the affected software. An attacker could exploit this vulnerability by sending invalid data to the Cisco Network Plug and Play agent on an affected device. A successful exploit could allow the attacker to cause a memory leak on the affected device, which could cause the device to reload. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-pnp-memleak
Credit: This vulnerability was found during the resolution a Cisco TAC support case
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS | ||
| Cisco IOS XE Software |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20180926-pnp-memleak?
The severity of cisco-sa-20180926-pnp-memleak is considered high due to its potential to allow memory leaks on affected devices.
How do I fix cisco-sa-20180926-pnp-memleak?
To fix cisco-sa-20180926-pnp-memleak, update your Cisco IOS or Cisco IOS XE Software to the latest patched version.
What devices are affected by cisco-sa-20180926-pnp-memleak?
cisco-sa-20180926-pnp-memleak affects devices running Cisco IOS Software and Cisco IOS XE Software.
What type of attack can exploit cisco-sa-20180926-pnp-memleak?
cisco-sa-20180926-pnp-memleak can be exploited by unauthenticated remote attackers to cause a memory leak.
Is there a workaround for cisco-sa-20180926-pnp-memleak?
Currently, there are no documented workarounds for mitigating the effects of cisco-sa-20180926-pnp-memleak other than applying updates.
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/references
- agent/title
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios
- canonical/cisco ios xe software