# CVE-2018-0180

Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. These vulnerabilities affect Cisco devices that are running Cisco IOS Software Release 15.4(2)T, 15.4(3)M, or 15.4(2)CG and later. Cisco Bug IDs: CSCuy32360, CSCuz60599.

- Page: https://www.vulneraibility.com/cve/CVE-2018-0180
- CVSS: 5.9
- Known exploited: yes, in CISA KEV since 2022-03-03; CISA due date 2022-03-17
- EPSS: 4.93% (percentile 92.3)
- CISA SSVC: exploitation active, automatable no, technical impact partial (assessed 2024-11-08)
- Weakness: CWE-399
- Published: 2018-03-28

## Affected versions

- Cisco IOS: affected Cisco IOS

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin
- [other] http://www.securityfocus.com/bid/103556
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0180

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.