{"cve_id":"CVE-2018-0155","published":"2018-03-28T22:29:00.420000+00:00","last_modified":"2026-06-17T01:29:57.360000+00:00","vuln_status":"Analyzed","description":"A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to cause a crash of the iosd process, causing a denial of service (DoS) condition. The vulnerability is due to insufficient error handling when the BFD header in a BFD packet is incomplete. An attacker could exploit this vulnerability by sending a crafted BFD message to or across an affected switch. A successful exploit could allow the attacker to trigger a reload of the system. This vulnerability affects Catalyst 4500 Supervisor Engine 6-E (K5), Catalyst 4500 Supervisor Engine 6L-E (K10), Catalyst 4500 Supervisor Engine 7-E (K10), Catalyst 4500 Supervisor Engine 7L-E (K10), Catalyst 4500E Supervisor Engine 8-E (K10), Catalyst 4500E Supervisor Engine 8L-E (K10), Catalyst 4500E Supervisor Engine 9-E (K10), Catalyst 4500-X Series Switches (K10), Catalyst 4900M Switch (K5), Catalyst 4948E Ethernet Switch (K5). Cisco Bug IDs: CSCvc40729.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","base_score":8.6,"base_severity":"HIGH","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"NONE","scope":"CHANGED","impact_c":"NONE","impact_i":"NONE","impact_a":"HIGH","cwe_ids":["CWE-388","CWE-755"],"in_kev":true,"kev_date_added":"2022-03-03","kev_ransomware":false,"epss_score":0.07742,"epss_percentile":0.9463,"cap_rule_version":"0.1.1","stage":"IMPACT","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"NONE","caps":["DOS"],"terminal":true,"cap_confidence":"high","ingested_at":"2026-09-18T08:44:33.370396+00:00","first_seen":"2018-03-28T22:29:00.420000+00:00","kev_first_seen":"2022-03-03T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["cisco","rockwellautomation"],"products":["allen-bradley_stratix_8300_industrial_managed_ethernet_switch","catalyst_4500-x_series_switches_\\(k10\\)","catalyst_4500_supervisor_engine_6-e_\\(k5\\)","catalyst_4500_supervisor_engine_6l-e_\\(k10\\)","catalyst_4500_supervisor_engine_7-e_\\(k10\\)","catalyst_4500_supervisor_engine_7l-e_\\(k10\\)","catalyst_4500e_supervisor_engine_8-e_\\(k10\\)","catalyst_4500e_supervisor_engine_8l-e_\\(k10\\)","catalyst_4500e_supervisor_engine_9-e_\\(k10\\)","catalyst_4900m_switch_\\(k5\\)","catalyst_4948e_ethernet_switch_\\(k5\\)","ios","ios_xe"],"affected":[{"vendor":"cisco","product":"ios","ranges":["3.6\\(2\\)e"]},{"vendor":"cisco","product":"ios_xe","ranges":["3.6\\(2\\)e"]}]}