Skip to content
CVE Tracker
Back

CVE-2018-0256

A vulnerability in the peer-to-peer message processing functionality of Cisco Packet Data Network Gateway could allow an unauthenticated,…

Medium5.8EPSS 1.5%
Published
Updated
Reserved
Assigned by
cisco

Description

A vulnerability in the peer-to-peer message processing functionality of Cisco Packet Data Network Gateway could allow an unauthenticated, remote attacker to cause the Session Manager (SESSMGR) process on an affected device to restart, resulting in a denial of service (DoS) condition. The vulnerability is due to incorrect validation of peer-to-peer packet headers. An attacker could exploit this vulnerability by sending a crafted peer-to-peer packet through an affected device. A successful exploit could allow the attacker to cause the SESSMGR process on the affected device to restart unexpectedly, which could briefly impact traffic while the SESSMGR process restarts and result in a DoS condition. Cisco Bug IDs: CSCvg88786.

Scores

CVSS scores of CVE-2018-0256, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0Medium5.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
EPSS (exploitation in 30 days)
1.5% · top 25% of all CVEs (3 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: yes · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.8.

Weakness

Affected products

  • Cisco Packet Data Network Gateway

    • affected Cisco Packet Data Network Gateway

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2018-0256 badge
[![CVE-2018-0256](https://trackcve.app/badge/CVE-2018-0256.svg)](https://trackcve.app/cve/CVE-2018-0256)

Record last updated .