{"id":"CVE-2018-0179","published":"2018-03-28T22:29:01Z","modified":"2026-06-17T01:30:01Z","title":"Cisco IOS Software Denial-of-Service Vulnerability","vendor":"Cisco","product":"IOS Software","tier":"core","eol":null,"description":{"text":"Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599.","provenance":"source","from":"NVD"},"summary":{"text":"The Login Enhancements (Login Block) feature of Cisco IOS Software contains multiple flaws affecting devices running Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. An unauthenticated remote attacker with network access can trigger a reload of the affected system, causing a denial of service, though this requires specific conditions that make exploitation difficult.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:14:22Z"},"cvss":{"score":5.9,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.04935,"percentile":0.92141,"date":"2026-10-31","provenance":"source"},"kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-17","ransomware":false,"requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0179","provenance":"source"},"vulncheckKev":{"dateAdded":"2022-03-03","exploitedFirstSeen":"2022-03-03","ransomware":false,"evidence":[{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-03-03"},{"url":"https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20180328-slogin.html","date":"2022-12-15"}],"evidenceTotal":2,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-399","name":null}],"references":[{"url":"http://www.securityfocus.com/bid/103556","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/103556","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin","tags":["Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0179","tags":["US Government Resource"]}],"techniques":[{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Unauthenticated remote attack against exposed login feature","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"could allow an unauthenticated, remote attacker to trigger a reload","start":95,"end":162}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1499","name":"Endpoint Denial of Service","tactics":["impact"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Reload causes service denial","mappingType":"primary_impact","evidence":[{"from":"description","quote":"resulting in a denial of service (DoS) condition","start":186,"end":234}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-1002","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1002","exploited":true,"exploitedSince":"2022-03-03","provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1190"],"provenance":"ai"},{"stage":"primary","techniques":["T1499"],"provenance":"ai"}],"timeline":[{"date":"2018-03-28","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0179","provenance":"source"},{"date":"2022-03-03","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","provenance":"source"},{"date":"2022-03-03","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-03-03","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1002","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":1436},"priority":{"score":57.6,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1704 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":18.43,"detail":"percentile 0.9214"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":4.13,"detail":"base score 5.9"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}