CVE-2018-0161

What it is

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Object ID Denial of Service Vulnerability. The vulnerability is due to a condition that could occur when the affected software processes an SNMP read request that contains a request for the ciscoFlashMIB object ID (OID). An attacker could trigger this vulnerability by issuing an SNMP GET request for the ciscoFlashMIB OID on an affected device. A successful exploit could cause the affected device to restart due to a SYS-3-CPUHOG. This vulnerability affects the following Cisco devices if they are running a vulnerable release of Cisco IOS Software and are configured to use SNMP Version 2 (SNMPv2) or SNMP Version 3 (SNMPv3): Cisco Catalyst 2960-L Series Switches, Cisco Catalyst Digital Building Series Switches 8P, Cisco Catalyst Digital Building Series Switches 8U. Cisco Bug IDs: CSCvd89541.

At a glance

Exploitability

Can be exploited over the network with a low-privilege account. High risk of service disruption.

In the wild

CISA lists this as exploited in real attacks. Treat as urgent.

Fix

A patch, advisory or fixed version is referenced. Upgrade or apply it.

Timeline

1. 2017-11-27 00:00 UTC ReservedThe CVE id was reserved by its CNA
2. 2018-03-28 22:29 UTC PublishedDisclosed publicly on CVE.org and NVD
3. 2022-03-03 Exploited in the wildAdded to CISA's Known Exploited Vulnerabilities list
4. 2022-03-17 Remediation deadlineCISA's due date for federal agencies to fix it
5. 2026-06-17 01:29 UTC Last updatedMost recent change to the record

Why it ranks here

• Exploited in the wild: yes, CISA lists it. This puts it above everything that is not.
• Exploit odds: 4.1% in the next 30 days (EPSS).
• Severity: 6.3 MEDIUM (CVSS).
• Fix: a patch or advisory is linked.

Details

Published

2018-03-28 22:29 UTC

Last modified

2026-06-17 01:29 UTC

Added to CISA KEV

2022-03-03

Exploit probability

4.1% · EPSS, next 30 days

Weakness

CWE-399

Record status

Analyzed

Affected

• Cisco iOS 15.2\(5\)e

Attack profile CVSS 3.1 · 6.3

Attack vector

Network

Complexity

High

Privileges needed

Low

User interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

Is it in your code?

Hand this to your coding agent. It searches your project for the affected products and checks versions. Nothing leaves your machine.

Read https://cve-list.com/agent/cve/CVE-2018-0161.md and follow it. Check whether this project is affected by CVE-2018-0161. Read only. Don't change anything and don't upload my code. Tell me yes, no or not sure, with the file as proof.

Copy as ticket · More options · Status badge