High severity8.6NVD Advisory· Published Oct 5, 2018· Updated Jun 17, 2026

CVE-2018-0472

Description

A vulnerability in the IPsec driver code of multiple Cisco IOS XE Software platforms and the Cisco ASA 5500-X Series Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause the device to reload. The vulnerability is due to improper processing of malformed IPsec Authentication Header (AH) or Encapsulating Security Payload (ESP) packets. An attacker could exploit this vulnerability by sending malformed IPsec packets to be processed by an affected device. An exploit could allow the attacker to cause a reload of the affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./ASA 5500 Seriesllm-fuzzy
Cisco Systems, Inc./iOS Xellm-fuzzy
Cisco Systems, Inc./Adaptive Security Appliance Cx Context Aware Security Softwarecpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105418nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041735nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041737nvdThird Party AdvisoryVDB Entry
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-ipsecnvdVendor Advisory
ics-cert.us-cert.gov/advisories/ICSA-19-094-04nvd

News mentions

No linked articles in our index yet.

cvss	0.559
epss	0.013
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000