Vulnerability Intelligence Report
CVE-2018-0163
A vulnerability in the 802.1x multiple-authentication (multi-auth) feature of Cisco IOS Software could allow an unauthenticated, adjacent attacker to bypass the authentication phase on an 802.1x multi-auth port. The vulnerability is due to a logic change error introduced into the code. An attacker could exploit this vulnerability by trying to access an 802.1x multi-auth port after a successful supplicant has authenticated. An exploit could allow the attacker to bypass the 802.1x access controls and obtain access to the network. Cisco Bug IDs: CSCvg69701.
No Active Exploit Signals
CVSS Base Score
6.5
MEDIUM
EPSS Probability:0.66%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-287 ↗CWE-287
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| cisco | ios | 15.4\(3\)m6, 15.4\(3\)m6a, 15.4\(3\)m7, 15.4\(3\)m7a, 15.4\(3\)m8, 15.4\(3.0i\)m6, 15.5\(3\)m3, 15.5\(3\)m4, 15.5\(3\)m4a, 15.5\(3\)m4b, 15.5\(3\)m4c, 15.5\(3\)m5, 15.5\(3\)m5a, 15.5\(3\)m6, 15.5\(3\)m6a, 15.6\(1\)t2, 15.6\(1\)t3, 15.6\(2\)t1, 15.6\(2\)t2, 15.6\(2\)t3, 15.6\(3\)m, 15.6\(3\)m0a, 15.6\(3\)m1, 15.6\(3\)m1a, 15.6\(3\)m1b, 15.6\(3\)m2, 15.6\(3\)m2a, 15.6\(3\)m3, 15.6\(3\)m3a, 15.7\(3\)m, 15.7\(3\)m0a, 15.7\(3\)m1, 15.7\(3\)m2 |
| cisco | 1120_connected_grid_router | all |
| cisco | 1240_connected_grid_router | all |
| cisco | 1905_serial_integrated_services_router | all |
| cisco | 1906c_integrated_services_router | all |
| cisco | 1921_integrated_services_router | all |
| cisco | 1941_integrated_services_router | all |
| cisco | 1941w_integrated_services_router | all |
| cisco | 2010_connected_grid_router | all |
| cisco | 2901_integrated_services_router | all |
| cisco | 2911_integrated_services_router | all |
| cisco | 2911a_integrated_services_router | all |
| cisco | 2921_integrated_services_router | all |
| cisco | 2951_integrated_services_router | all |
| cisco | 3925_integrated_services_router | all |
| cisco | 3925e_integrated_services_router | all |
| cisco | 3945_integrated_services_router | all |
| cisco | 3945e_integrated_services_router | all |
| cisco | 5915_embedded_service_router | all |
| cisco | 5921_embedded_services_router | all |
| cisco | 5940_embedded_services_router | all |
| cisco | 800_series_routers | all |
| cisco | 800m_integrated_services_router | all |
| cisco | 809_industrial_integrated_services_router | all |
| cisco | 812_3g_integrated_services_router | all |
| cisco | 812_cifi_integrated_services_router | all |
| cisco | 819_hardened_3g | all |
| cisco | 819_hardened_dual_radio_802.11n_wifi_integrated_services_router | all |
| cisco | 819_hardened_integrated_services_router | all |
| cisco | 819_integrated_services_router | all |
| cisco | 819_non-hardened_4g_lte_m2m | all |
| cisco | 819_non-hardened_secure_multi-mode_4g_lte_m2m_isr_router | all |
| cisco | 829_industrial_integrated_services_router | all |
| cisco | 860vae-w_integrated_services_router | all |
| cisco | 861_integrated_services_router | all |
| cisco | 861w_integrated_services_router | all |
| cisco | 866vae_integrated_services_router | all |
| cisco | 867vae_integrated_services_router | all |
| cisco | 880-voice_integrated_services_router | all |
| cisco | 881-cube_integrated_services_router | all |
| cisco | 881_3g | all |
| cisco | 881_3g_integrated_services_router | all |
| cisco | 881_secure_fast_ethernet | all |
| cisco | 881w_integrated_services_router | all |
| cisco | 886va-cube_integrated_services_router | all |
| cisco | 886va-w_integrated_services_router | all |
| cisco | 886va_integrated_services_router | all |
| cisco | 886vag_3g_integrated_services_router | all |
| cisco | 887_multi-mode_vdsl2\/asdl2\+_pots | all |
| cisco | 887va-cube_integrated_services_router | all |
| cisco | 887va-w_integrated_services_router | all |
| cisco | 887va_integrated_services_router | all |
| cisco | 887vag_3g_integrated_services_router | all |
| cisco | 887vagw_3g | all |
| cisco | 887vam-w_integrated_services_router | all |
| cisco | 887vamg_3g_integrated_services_router | all |
| cisco | 888-cube_integrated_services_router | all |
| cisco | 888_integrated_services_router | all |
| cisco | 888e-cube_integrated_services_router | all |
| cisco | 888e_integrated_services_router | all |
| cisco | 888eg_3g_integrated_services_router | all |
| cisco | 888w_integrated_services_router | all |
| cisco | 891-24x_integrated_services_router | all |
| cisco | 891_integrated_services_router | all |
| cisco | 891w_integrated_services_router | all |
| cisco | 892_integrated_services_router | all |
| cisco | 892f-cube_integrated_services_router | all |
| cisco | 892w_integrated_services_router | all |
| cisco | 896_multi-mode_vdsl2\/adsl2\+_isdn | all |
| cisco | 897_multi-mode_vdsl2\/adsl2\+_pots | all |
| cisco | 897_multi-mode_vdsl2\/adsl2\+_pots_annex_m | all |
| cisco | 898_secure_g.shdsl_efm\/atm | all |
| cisco | c866vae_integrated_services_router | all |
| cisco | c867vae_integrated_services_router | all |
| cisco | c881_integrated_services_router | all |
| cisco | c881w_integrated_services_router | all |
| cisco | c886va_integrated_services_routers | all |
| cisco | c886vaj_integrated_services_router | all |
| cisco | c887va_integrated_services_routers | all |
| cisco | c887vam_integrated_services_routers | all |
| cisco | c888_integrated_services_router | all |
| cisco | c888ea_integrated_services_router | all |
| cisco | c891f_integrated_services_routers | all |
| cisco | c891fw_integrated_services_router | all |
| cisco | c892fsp_integrated_services_router | all |
| cisco | c896va_integrated_services_router | all |
| cisco | c897va-m_integrated_services_router | all |
| cisco | c897va_integrated_services_router | all |
| cisco | c897vam-w_integrated_services_router | all |
| cisco | c897vaw_integrated_services_router | all |
| cisco | c898ea_integrated_services_router | all |
| cisco | c899_secure_gigabit_ethernet | all |
| cisco | vg204xm_analog_voice_gateway | all |
| cisco | vg350_analog_voice_gateway | all |
| cisco | vg3x0_analog_voice_gateway | all |
| rockwellautomation | stratix_5900 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.660%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Cisco Systems, Inc. · Hosted Service · USA |
| Reserved | 2017-11-27T00:00:00 |
| Published | 2018-03-28T22:00:00 |
| Patch Date | 2018-03-28 |
| Last Updated | 2024-12-02T20:54:54 |
Community Chatter & Buzz