Skip to content
CVE Tracker
Back

CVE-2018-0485

Cisco IOS and IOS XE Software SM-1T3/E3 Service Module Denial of Service Vulnerability

High8.6EPSS 4.1%
Published
Updated
Reserved
Assigned by
cisco

Description

A vulnerability in the SM-1T3/E3 firmware on Cisco Second Generation Integrated Services Routers (ISR G2) and the Cisco 4451-X Integrated Services Router (ISR4451-X) could allow an unauthenticated, remote attacker to cause the ISR G2 Router or the SM-1T3/E3 module on the ISR4451-X to reload, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of user input. An attacker could exploit this vulnerability by first connecting to the SM-1T3/E3 module console and entering a string sequence. A successful exploit could allow the attacker to cause the ISR G2 Router or the SM-1T3/E3 module on the ISR4451-X to reload, resulting in a DoS condition on an affected device.

Scores

CVSS scores of CVE-2018-0485, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0High8.6CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
EPSS (exploitation in 30 days)
4.1% · top 9.2% of all CVEs (4 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: yes · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.6.

Weakness

Affected products

References (4)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2018-0485 badge
[![CVE-2018-0485](https://trackcve.app/badge/CVE-2018-0485.svg)](https://trackcve.app/cve/CVE-2018-0485)

Record last updated .