CVE Watch—

CVE-2018-0172

Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

CVSS

—

No CVSS

EPSS

7.8%

p95

KEV

YES

Mar 3, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

7.8%EPSS · 30 days7.8%

2026-09-172026-10-15

KEV catalog record

Product

Cisco / IOS and IOS XE Software

Vulnerability

Cisco IOS and IOS XE Software Improper Input Validation Vulnerability

Added to KEV

Mar 3, 2022

Remediate by

Mar 17, 2022

Known ransomware use

Summary description

A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS).

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-0172

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2017-6736—

99.4%

KEV—80Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—CVE-2017-6737—

98.8%

KEV—80Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—CVE-2017-6742—

97.6%

KEV—79Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—CVE-2018-0151—

96.5%

KEV—79Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability—CVE-2017-12240—

96.5%

KEV—79Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability—CVE-2017-6740—

95.9%

KEV—79Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability—