CVE-2018-0151

KEV

Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability

Vendor / Project: Cisco
Product: IOS and IOS XE Software
Date added: Mar 3, 2022
Due date: Mar 17, 2022
Known ransomware use: Unknown
CWEs: CWE-119

Description

A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-0151