02 Records
FEED: ACQUIRING
01 RecordSTATE: PUBLISHED
02 Description
CNA: ciscoCisco IOS and IOS XE Software IP Service Level Agreement Denial of Service Vulnerability
03 Exploitation and scoring
SRC: CISA, FIRST, NVD, RED HAT- Exploitation
- Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.
- SSVC decision
- ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
- AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
- Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.
CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.- EPSS probability
- 2.61% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Ranks above 84.1% of scored records. A rank, not a probability.
- NVD base score
- 8.6 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
SCHEMA: 5.1
- Published
- 2019-03-27 23:05Z7 YR AGO
- Last updated
- 2024-11-19 19:14Z1 YR AGO
- Reserved
- 2018-12-06
- Assigning CNA
- cisco
- Record state
- PUBLISHED
- Severity
- High (CVSS 8.6)
- CNA CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- Weaknesses
- CWE-400Uncontrolled Resource ConsumptionClass
- CWE-770Allocation of Resources Without Limits or ThrottlingBase
- Data version
- 5.1
- Document digest
- 10428dc48d2ec47b88723b3268a21de37f407cb195f0b2d33b02681c579a0427
05 Affected products
PAIRS: 1VendorProductVersionsPlatforms
CiscoCisco IOS and IOS-XE Software3.7.0S, 3.7.1S, 3.7.2S, 3.7.3S, 3.7.4S, 3.7.5S, 3.7.6S, 3.7.7S, 3.7.8S, 3.7.4aS, 3.7.2tS, 3.7.0bS, 3.7.1aS, 3.8.0S, 3.8.1S, 3.8.2S, 3.9.1S, 3.9.0S, 3.9.2S, 3.9.1aS, 3.9.0aS, 3.2.0SE, 3.2.1SE, 3.2.2SE, 3.2.3SE, 3.3.0SE, 3.3.1SE, 3.3.2SE, 3.3.3SE, 3.3.4SE, 3.3.5SE, 3.3.0XO, 3.3.1XO, 3.3.2XO, 3.4.0SG, 3.4.2SG, 3.4.1SG, 3.4.3SG, 3.4.4SG, 3.4.5SG, 3.4.6SG, 3.4.7SG, 3.4.8SG, 3.5.0E, 3.5.1E, 3.5.2E, 3.5.3E, 3.10.0S, 3.10.1S, 3.10.2S, 3.10.3S, 3.10.4S, 3.10.5S, 3.10.6S, 3.10.2aS, 3.10.2tS, 3.10.7S, 3.10.8S, 3.10.8aS, 3.10.9S, 3.10.10S, 3.11.1S, 3.11.2S, 3.11.0S, 3.11.3S, 3.11.4S, 3.12.0S, 3.12.1S, 3.12.2S, 3.12.3S, 3.12.0aS, 3.12.4S, 3.13.0S, 3.13.1S, 3.13.2S, 3.13.3S, 3.13.4S, 3.13.5S, 3.13.2aS, 3.13.0aS, 3.13.5aS, 3.13.6S, 3.13.7S, 3.13.6aS, 3.13.6bS, 3.13.7aS, 3.13.8S, 3.6.0E, 3.6.1E, 3.6.0aE, 3.6.0bE, 3.6.2aE, 3.6.2E, 3.6.3E, 3.6.4E, 3.6.5E, 3.6.6E, 3.6.5aE, 3.6.5bE, 3.6.7E, 3.6.7aE, 3.6.7bE, 3.14.0S, 3.14.1S, 3.14.2S, 3.14.3S, 3.14.4S, 3.15.0S, 3.15.1S, 3.15.2S, 3.15.1cS, 3.15.3S, 3.15.4S, 3.7.0E, 3.7.1E, 3.7.2E, 3.7.3E, 3.7.4E, 3.7.5E, 3.16.0S, 3.16.1S, 3.16.0aS, 3.16.1aS, 3.16.2S, 3.16.2aS, 3.16.0bS, 3.16.0cS, 3.16.3S, 3.16.2bS, 3.16.3aS, 3.16.4S, 3.16.4aS, 3.16.4bS, 3.16.4gS, 3.16.5S, 3.16.4cS, 3.16.4dS, 3.16.4eS, 3.16.6S, 3.16.5aS, 3.16.5bS, 3.16.6bS, 3.17.0S, 3.17.1S, 3.17.2S, 3.17.1aS, 3.17.3S, 3.17.4S, 16.1.1, 16.1.2, 16.1.3, 3.2.0JA, 16.2.1, 16.2.2, 3.8.0E, 3.8.1E, 3.8.2E, 3.8.3E, 3.8.4E, 3.8.5E, 3.8.5aE, 16.3.1, 16.3.2, 16.3.3, 16.3.1a, 16.3.4, 16.4.1, 16.4.2, 16.5.1, 16.5.1a, 16.5.1b, 16.5.2, 16.5.3, 3.18.0aS, 3.18.0S, 3.18.1S, 3.18.2S, 3.18.3S, 3.18.4S, 3.18.0SP, 3.18.1SP, 3.18.1aSP, 3.18.1gSP, 3.18.1bSP, 3.18.1cSP, 3.18.2SP, 3.18.1hSP, 3.18.2aSP, 3.18.1iSP, 3.9.0E, 3.9.1E, 3.9.2E, 3.9.2bE, 16.6.1, 3.10.0E, 3.10.0cE—