Skip to content
CVE Tracker
Back

CVE-2018-0179

Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote…

Medium6.8Known exploitedEPSS 4.9%
Published
Updated
Reserved
Assigned by
cisco

Description

Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599.

Exploited in the wild

CISA lists this vulnerability in its Known Exploited Vulnerabilities catalog as Cisco IOS Software Denial-of-Service Vulnerability.

Added
3 Mar 2022
Fix due (US federal)
17 Mar 2022
Used by ransomware
Not known

Apply updates per vendor instructions.

Scores

CVSS scores of CVE-2018-0179, by who scored it
Scored byCVSSScoreVector
CISA-ADPADP (enrichment)3.1Medium6.8CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
NVDNVD · Analyzed3.1Medium5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
4.9% · top 7.8% of all CVEs (3 Nov 2026)
CISA SSVC
Exploitation: active · Automatable: no · Technical impact: partial

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.8.

Weakness

Affected products

  • Cisco IOS

    • affected Cisco IOS

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .