7.4

CVE-2018-0241: cisco ios_xr Resource Management Errors

CVSS: 7.4v3.0HighModified
Published 19-04-2018Last modified 29-11-2024
Open JSON

Vulnerability summary

CVE-2018-0241 is a high (CVSS 7.4) Resource Management Errors vulnerability in cisco ios_xr. EPSS estimates a 0.82% chance of exploitation in the next 30 days, higher than 56.5% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.4/10
010
High · v3.0 (NVD)
EPSS score
0.82%
0%100%
Low · -0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 19-04-2018
    PublishedVulnerability first disclosed.
  2. 29-11-2024
    Last modifiedVulnerability information updated.

Description

A vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. The vulnerability is due to improper handling of UDP broadcast packets that are forwarded to an IPv4 helper address. An attacker could exploit this vulnerability by sending multiple UDP broadcast packets to the affected device. An exploit could allow the attacker to cause a buffer leak on the affected device, eventually resulting in a DoS condition requiring manual intervention to recover. This vulnerability affects all Cisco IOS XR platforms running 6.3.1, 6.2.3, or earlier releases of Cisco IOS XR Software when at least one IPv4 helper address is configured on an interface of the device. Cisco Bug IDs: CSCvi35625.

CVSS metrics

2 scores · 1 source · 2 versions

EPSS trend

Probability

0.82%

Chance of exploitation in the next 30 days

Percentile

57%

Versus all other CVEs

30-day change

-0.02 pp

From 0.84% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.82%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco1 product
  • ios_xr4.0.4.base | 4.1.3.base | 4.2.4.base | 4.3.4.base | 4.4.3.ce | 5.0.3.ce | 5.1.4.base | 5.2.5.ce | 5.3.4.base | 5.4.3.ce | 6.0.4.base | 6.1.4.base | 6.2.3.base

1 vendor · 1 product

References

3 links