CVE Watch—

CVE-2018-0158

Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability

CVSS

—

No CVSS

EPSS

7.2%

p94

KEV

YES

Mar 3, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

7.2%EPSS · 30 days7.3%

2026-08-022026-08-31

KEV catalog record

Product

Cisco / IOS Software and Cisco IOS XE Software

Vulnerability

Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability

Added to KEV

Mar 3, 2022

Remediate by

Mar 17, 2022

Known ransomware use

Summary description

A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service (DoS) condition.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-0158

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2018-0156—

94.5%

KEV—78Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability—CVE-2018-0159—

93.6%

KEV—78Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability—