What is CVE-2018-0256?

CVE-2018-0256 is a medium-severity vulnerability in Cisco Asr_5000_series_software, classified under Improper Input Validation. CVSS score: 5.8/10. Published 2018-04-19.

How severe is CVE-2018-0256?

Medium severity. CVSS v3 base score is 5.8 out of 10.

Improper input validation in Cisco Asr_5000_series_software

CVE-2018-0256

A vulnerability in the peer-to-peer message processing functionality of Cisco Packet Data Network Gateway could allow an unauthenticated, remote attacker to cause the Session Manager (SESSMGR) process on an affected device to restart, resu…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.016 (73.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.8 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L.

Affected products

Cisco Asr_5000_series_software — versions 20.3.0.66671, p2p_2.16.879
N/a Cisco Packet Data Network Gateway — versions Cisco Packet Data Network Gateway

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2018-0256?: CVE-2018-0256 is a medium-severity vulnerability in Cisco Asr_5000_series_software, classified under Improper Input Validation. CVSS score: 5.8/10. Published 2018-04-19.
How severe is CVE-2018-0256?: Medium severity. CVSS v3 base score is 5.8 out of 10.