Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-0131

A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the encrypted nonces of an Internet Key Exchange Version 1 (IKEv1) session. The vulnerability exists because the affected software responds incorrectly to decryption failures. An attacker could exploit this vulnerability sending crafted ciphertexts to a device configured with IKEv1 that uses RSA-encrypted nonces. A successful exploit could allow the attacker to obtain the encrypted nonces. Cisco Bug IDs: CSCve77140.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.2%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
Products affected by CVE-2018-0131
  • Cisco » Ios » Version: 15.5(3)s
    cpe:2.3:o:cisco:ios:15.5(3)s
  • Cisco » Ios Xe » Version: 15.5(3)s
    cpe:2.3:o:cisco:ios_xe:15.5(3)s


Products
Pricing
Contact Us

Shodan ® - All rights reserved