CVE-2018-0473: cisco cisco ios software Resource Management Errors
Vulnerability summary
CVE-2018-0473 is a high (CVSS 8.6) Resource Management Errors vulnerability in cisco cisco ios software. EPSS estimates a 3.52% chance of exploitation in the next 30 days, higher than 89% of scored vulnerabilities.
Timeline
- 05-10-2018PublishedVulnerability first disclosed.
- 26-11-2024Last modifiedVulnerability information updated.
Description
A vulnerability in the Precision Time Protocol (PTP) subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Precision Time Protocol. The vulnerability is due to insufficient processing of PTP packets. An attacker could exploit this vulnerability by sending a custom PTP packet to, or through, an affected device. A successful exploit could allow the attacker to cause a DoS condition for the PTP subsystem, resulting in time synchronization issues across the network.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.52%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.52% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco2 products
- cisco ios softwaren/a
- ios15.2\(4\)e | 15.2\(5\)
1 vendor · 2 products
References
4 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ptpVendor AdvisoryX Refsource CISCO
- ics-cert.us-cert.gov/advisories/ICSA-19-094-03X Refsource MISC