Improper authentication in Cisco IOS
Priority LOW 30CWE-287Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-287.
Summary
A vulnerability in the 802.1x multiple-authentication (multi-auth) feature of Cisco IOS Software could allow an unauthenticated, adjacent attacker to bypass the authentication phase on an 802.1x multi-auth port. The vulnerability is due to a logic change error introduced into the code. An attacker could exploit this vulnerability by trying to access an 802.1x multi-auth port after a successful supplicant has authenticated. An exploit could allow the attacker to bypass the 802.1x access controls and obtain access to the network. Cisco Bug IDs: CSCvg69701.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00632 50th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Cisco IOS | Cisco IOS | — | No fix listed | CNA |
- Cisco IOS Vendor— Affected Cisco IOS Fixed in — No fix listed CNA
CPE configurations NVD · 128
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:cisco:ios:15.4\(3\)m6:*:*:*:*:*:*:* | 15.4(3)m6 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.4\(3\)m6a:*:*:*:*:*:*:* | 15.4(3)m6a | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.4\(3\)m7:*:*:*:*:*:*:* | 15.4(3)m7 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.4\(3\)m7a:*:*:*:*:*:*:* | 15.4(3)m7a | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.4\(3\)m8:*:*:*:*:*:*:* | 15.4(3)m8 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.4\(3.0i\)m6:*:*:*:*:*:*:* | 15.4(3.0i)m6 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.5\(3\)m3:*:*:*:*:*:*:* | 15.5(3)m3 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.5\(3\)m4:*:*:*:*:*:*:* | 15.5(3)m4 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.5\(3\)m4a:*:*:*:*:*:*:* | 15.5(3)m4a | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.5\(3\)m4b:*:*:*:*:*:*:* | 15.5(3)m4b | Vulnerable | Cisco |
- cpe:2.3:o:cisco:ios:15.4\(3\)m6:*:*:*:*:*:*:* Versions 15.4(3)m6 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.4\(3\)m6a:*:*:*:*:*:*:* Versions 15.4(3)m6a Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.4\(3\)m7:*:*:*:*:*:*:* Versions 15.4(3)m7 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.4\(3\)m7a:*:*:*:*:*:*:* Versions 15.4(3)m7a Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.4\(3\)m8:*:*:*:*:*:*:* Versions 15.4(3)m8 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.4\(3.0i\)m6:*:*:*:*:*:*:* Versions 15.4(3.0i)m6 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.5\(3\)m3:*:*:*:*:*:*:* Versions 15.5(3)m3 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.5\(3\)m4:*:*:*:*:*:*:* Versions 15.5(3)m4 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.5\(3\)m4a:*:*:*:*:*:*:* Versions 15.5(3)m4a Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.5\(3\)m4b:*:*:*:*:*:*:* Versions 15.5(3)m4b Vulnerable ·Cisco
Show 118 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:cisco:ios:15.5\(3\)m4c:*:*:*:*:*:*:* | 15.5(3)m4c | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.5\(3\)m5:*:*:*:*:*:*:* | 15.5(3)m5 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.5\(3\)m5a:*:*:*:*:*:*:* | 15.5(3)m5a | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.5\(3\)m6:*:*:*:*:*:*:* | 15.5(3)m6 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.5\(3\)m6a:*:*:*:*:*:*:* | 15.5(3)m6a | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(1\)t2:*:*:*:*:*:*:* | 15.6(1)t2 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(1\)t3:*:*:*:*:*:*:* | 15.6(1)t3 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(2\)t1:*:*:*:*:*:*:* | 15.6(2)t1 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(2\)t2:*:*:*:*:*:*:* | 15.6(2)t2 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(2\)t3:*:*:*:*:*:*:* | 15.6(2)t3 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(3\)m:*:*:*:*:*:*:* | 15.6(3)m | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(3\)m0a:*:*:*:*:*:*:* | 15.6(3)m0a | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(3\)m1:*:*:*:*:*:*:* | 15.6(3)m1 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(3\)m1a:*:*:*:*:*:*:* | 15.6(3)m1a | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(3\)m1b:*:*:*:*:*:*:* | 15.6(3)m1b | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(3\)m2:*:*:*:*:*:*:* | 15.6(3)m2 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(3\)m2a:*:*:*:*:*:*:* | 15.6(3)m2a | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(3\)m3:*:*:*:*:*:*:* | 15.6(3)m3 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.6\(3\)m3a:*:*:*:*:*:*:* | 15.6(3)m3a | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.7\(3\)m:*:*:*:*:*:*:* | 15.7(3)m | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.7\(3\)m0a:*:*:*:*:*:*:* | 15.7(3)m0a | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.7\(3\)m1:*:*:*:*:*:*:* | 15.7(3)m1 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:ios:15.7\(3\)m2:*:*:*:*:*:*:* | 15.7(3)m2 | Vulnerable | Cisco |
| cpe:2.3:h:cisco:1120_connected_grid_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:1240_connected_grid_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:1905_serial_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:1906c_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:1921_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:1941_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:1941w_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:2010_connected_grid_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:2901_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:2911_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:2911a_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:2921_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:2951_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:3925_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:3925e_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:3945_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:3945e_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:5915_embedded_service_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:5921_embedded_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:5940_embedded_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:800_series_routers:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:800m_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:809_industrial_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:812_3g_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:812_cifi_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:819_hardened_3g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:819_hardened_dual_radio_802.11n_wifi_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:819_hardened_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:819_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:819_non-hardened_4g_lte_m2m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:819_non-hardened_secure_multi-mode_4g_lte_m2m_isr_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:829_industrial_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:860vae-w_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:861_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:861w_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:866vae_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:867vae_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:880-voice_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:881-cube_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:881_3g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:881_3g_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:881_secure_fast_ethernet:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:881w_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:886va-cube_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:886va-w_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:886va_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:886vag_3g_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:887_multi-mode_vdsl2\/asdl2\+_pots:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:887va-cube_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:887va-w_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:887va_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:887vag_3g_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:887vagw_3g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:887vam-w_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:887vamg_3g_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:888-cube_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:888_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:888e-cube_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:888e_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:888eg_3g_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:888w_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:891-24x_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:891_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:891w_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:892_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:892f-cube_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:892w_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:896_multi-mode_vdsl2\/adsl2\+_isdn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:897_multi-mode_vdsl2\/adsl2\+_pots:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:897_multi-mode_vdsl2\/adsl2\+_pots_annex_m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:898_secure_g.shdsl_efm\/atm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c866vae_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c867vae_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c881_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c881w_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c886va_integrated_services_routers:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c886vaj_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c887va_integrated_services_routers:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c887vam_integrated_services_routers:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c888_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c888ea_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c891f_integrated_services_routers:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c891fw_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c892fsp_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c896va_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c897va-m_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c897va_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c897vam-w_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c897vaw_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c898ea_integrated_services_router:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:c899_secure_gigabit_ethernet:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:vg204xm_analog_voice_gateway:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:vg350_analog_voice_gateway:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:cisco:vg3x0_analog_voice_gateway:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Cisco |
| cpe:2.3:h:rockwellautomation:stratix_5900:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Rockwell |
- cpe:2.3:o:cisco:ios:15.5\(3\)m4c:*:*:*:*:*:*:* Versions 15.5(3)m4c Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.5\(3\)m5:*:*:*:*:*:*:* Versions 15.5(3)m5 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.5\(3\)m5a:*:*:*:*:*:*:* Versions 15.5(3)m5a Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.5\(3\)m6:*:*:*:*:*:*:* Versions 15.5(3)m6 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.5\(3\)m6a:*:*:*:*:*:*:* Versions 15.5(3)m6a Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(1\)t2:*:*:*:*:*:*:* Versions 15.6(1)t2 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(1\)t3:*:*:*:*:*:*:* Versions 15.6(1)t3 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(2\)t1:*:*:*:*:*:*:* Versions 15.6(2)t1 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(2\)t2:*:*:*:*:*:*:* Versions 15.6(2)t2 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(2\)t3:*:*:*:*:*:*:* Versions 15.6(2)t3 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(3\)m:*:*:*:*:*:*:* Versions 15.6(3)m Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(3\)m0a:*:*:*:*:*:*:* Versions 15.6(3)m0a Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(3\)m1:*:*:*:*:*:*:* Versions 15.6(3)m1 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(3\)m1a:*:*:*:*:*:*:* Versions 15.6(3)m1a Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(3\)m1b:*:*:*:*:*:*:* Versions 15.6(3)m1b Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(3\)m2:*:*:*:*:*:*:* Versions 15.6(3)m2 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(3\)m2a:*:*:*:*:*:*:* Versions 15.6(3)m2a Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(3\)m3:*:*:*:*:*:*:* Versions 15.6(3)m3 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.6\(3\)m3a:*:*:*:*:*:*:* Versions 15.6(3)m3a Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.7\(3\)m:*:*:*:*:*:*:* Versions 15.7(3)m Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.7\(3\)m0a:*:*:*:*:*:*:* Versions 15.7(3)m0a Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.7\(3\)m1:*:*:*:*:*:*:* Versions 15.7(3)m1 Vulnerable ·Cisco
- cpe:2.3:o:cisco:ios:15.7\(3\)m2:*:*:*:*:*:*:* Versions 15.7(3)m2 Vulnerable ·Cisco
- cpe:2.3:h:cisco:1120_connected_grid_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:1240_connected_grid_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:1905_serial_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:1906c_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:1921_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:1941_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:1941w_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:2010_connected_grid_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:2901_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:2911_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:2911a_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:2921_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:2951_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:3925_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:3925e_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:3945_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:3945e_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:5915_embedded_service_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:5921_embedded_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:5940_embedded_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:800_series_routers:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:800m_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:809_industrial_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:812_3g_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:812_cifi_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:819_hardened_3g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:819_hardened_dual_radio_802.11n_wifi_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:819_hardened_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:819_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:819_non-hardened_4g_lte_m2m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:819_non-hardened_secure_multi-mode_4g_lte_m2m_isr_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:829_industrial_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:860vae-w_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:861_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:861w_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:866vae_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:867vae_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:880-voice_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:881-cube_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:881_3g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:881_3g_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:881_secure_fast_ethernet:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:881w_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:886va-cube_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:886va-w_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:886va_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:886vag_3g_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:887_multi-mode_vdsl2\/asdl2\+_pots:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:887va-cube_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:887va-w_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:887va_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:887vag_3g_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:887vagw_3g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:887vam-w_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:887vamg_3g_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:888-cube_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:888_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:888e-cube_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:888e_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:888eg_3g_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:888w_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:891-24x_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:891_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:891w_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:892_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:892f-cube_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:892w_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:896_multi-mode_vdsl2\/adsl2\+_isdn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:897_multi-mode_vdsl2\/adsl2\+_pots:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:897_multi-mode_vdsl2\/adsl2\+_pots_annex_m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:898_secure_g.shdsl_efm\/atm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c866vae_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c867vae_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c881_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c881w_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c886va_integrated_services_routers:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c886vaj_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c887va_integrated_services_routers:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c887vam_integrated_services_routers:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c888_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c888ea_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c891f_integrated_services_routers:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c891fw_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c892fsp_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c896va_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c897va-m_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c897va_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c897vam-w_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c897vaw_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c898ea_integrated_services_router:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:c899_secure_gigabit_ethernet:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:vg204xm_analog_voice_gateway:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:vg350_analog_voice_gateway:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:cisco:vg3x0_analog_voice_gateway:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
- cpe:2.3:h:rockwellautomation:stratix_5900:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Rockwell
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-0163
- 2026-10-03 Alias added: GHSA-hmgw-34q4-8g9x
- 2026-10-25 EPSS moved to the 50th–90th percentile
References
More Cisco Ios vulnerabilities
- TI-2018-00138 Improper input validation in Cisco IOS and IOS XE KEVCVSS 3.1CRITICAL 9.8
- TI-2017-09019 Improper input validation in Cisco IOS and IOS XE KEVCVSS 3.1CRITICAL 9.8
- TI-2017-02977 Improper input validation in Cisco IOS and IOS XE Software KEVCVSS 3.1CRITICAL 9.8
- TI-2018-00135 Memory corruption in Cisco IOS, IOS XE, and IOS XR KEVCVSS 3.1HIGH 8.8
- TI-2017-04499 Memory corruption in Cisco IOS KEVCVSS 3.1HIGH 8.8
- TI-2017-04498 Memory corruption in Cisco IOS KEVCVSS 3.1HIGH 8.8
Sources
- CVE-2018-0163 · CVE Program
- CVE-2018-0163 · NVD
- FIRST EPSS
- GHSA-hmgw-34q4-8g9x · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences