Approved changes feed: RSS · Atom

cpe:2.3:a:cisco_systems,_inc.:ios_and_ios_xe:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCisco Systems, Inc. (8b9d1ced-1f9f-5a61-b55b-75794534761d)
ProductIos And Ios Xe (8189fb40-ce3b-5b9c-8345-d9713fa7d7f4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0131 vulnerable 2026-06-03 14:37:48.448633 Details available
A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the encrypted nonces of an Internet Key Exchange Version 1 (IKEv1) session. The vulnerability exists because the affected software responds incorrectly to decryption failures. An attacker could exploit this vulnerability sending crafted ciphertexts to a device configured with IKEv1 that uses RSA-encrypted nonces. A successful exploit could allow the attacker to obtain the encrypted nonces. Cisco Bug IDs: CSCve77140.
Published: 2018-08-14T17:00:00.000Z
Updated: 2024-11-26T14:48:59.214Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.