← Vulnerability Intelligence

CVE-2018-0180

Medium 5.9 Exploited in the wild (KEV)

Confirmed active exploitation — CISA KEV catalog

Name
Cisco IOS Software Denial-of-Service Vulnerability
Added to catalog
Remediation due date (US federal)
Required action
Apply updates per vendor instructions.

Description

Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599.

Metrics

CVSS 3.1
5.9 (MEDIUM) Score source: NVD CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS — exploit probability
5% (percentile: 92) as of 1 November 2026
CWE
CWE-399

Affected products

cisco: ios; cisco: 3925 integrated services router; cisco: 3925e integrated services router; cisco: 3945 integrated services router; cisco: 3945e integrated services router; cisco: 1000 integrated services router; cisco: 1100-4g\/6g integrated services router; cisco: 1100-4g integrated services router; cisco: 1100-4gltegb integrated services router; cisco: 1100-4gltena integrated services router; cisco: 1100-4p integrated services router; cisco: 1100-6g integrated services router; cisco: 1100-8p integrated services router; cisco: 1100-lte integrated services router; cisco: 1100 integrated services router

References