Resource exhaustion in Cisco cBR Series Converged Broadband Routers - CVE-2018-0257

Vulnerability identifier: #VU12085

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-0257

CWE-ID: CWE-400

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

A vulnerability allows an adjacent unauthenticated attacker to cause DoS condition on the target system.

The weakness exists due to the incorrect handling of certain DHCP packets. An adjacent attacker can send certain DHCP packets to a specific segment, increase CPU usage and cause the service to crash.

Cisco cBR Series Converged Broadband Routers

Update to versions 16.8(0.109), 16.7(1.34) or 16.6(2.36).

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-cbr8

• Denial of service in Cisco cBR Series Converged Broadband Routers