CVE-2018-0473

A vulnerability in the Precision Time Protocol (PTP) subsystem of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of the Precision Time Protocol. The vulnerability is due to insufficient processing of PTP packets. An attacker could exploit this vulnerability by sending a custom PTP packet to, or through, an affected device. A successful exploit could allow the attacker to cause a DoS condition for the PTP subsystem, resulting in time synchronization issues across the network.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:cisco:ios:15.2\(4\)e:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.2\(5\):*:*:*:*:*:*:*

History

21 Nov 2024, 03:38

Type Values Removed Values Added
References () http://www.securityfocus.com/bid/105427 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/105427 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id/1041737 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1041737 - Third Party Advisory, VDB Entry
References () https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03 - () https://ics-cert.us-cert.gov/advisories/ICSA-19-094-03 -
References () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ptp - Vendor Advisory () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ptp - Vendor Advisory

Information

Published : 2018-10-05 14:29

Updated : 2024-11-21 03:38


NVD link : CVE-2018-0473

Mitre link : CVE-2018-0473

CVE.ORG link : CVE-2018-0473


JSON object : View

Products Affected

cisco

  • ios
CWE
CWE-399

Resource Management Errors

NVD-CWE-noinfo