THREATPORT/VULNERABILITY/CVE-2018-0421
HIGH SEVERITY

CVE-2018-0421

Prime Access Registrar vulnerability

CVSS
8.6
EPSS
3.5%
EPSS pct
88th
Exploited
No known
A vulnerability in TCP connection management in Cisco Prime Access Registrar could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition when the application unexpectedly restarts. The vulnerability is due to incorrect handling of incoming TCP SYN packets to specific listening ports. The improper handling of the TCP SYN packets could cause a system file description to be allocated and not freed. An attacker could exploit this vulnerability by sending a crafted stream of TCP SYN packets to the application. A successful exploit could allow the attacker to cause the application to eventually restart if a file description cannot be obtained.
Affected vendor
Cisco
Affected product
Prime Access Registrar
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weakness type (CWE)
  • CWE-399
  • CWE-772 — Missing Release of Resource after Effective Lifetime
Published
2018-10-05

Risk analysis

Based on its CVSS vector, this vulnerability is exploitable over the network, low attack complexity, requiring no privileges, no user interaction. Successful exploitation leads to high impact to availability.

Its EPSS score of 3.5% reflects a lower probability of exploitation activity in the wild over the next 30 days, placing it above 88% of all scored CVEs.

Check your external exposure to CVE-2018-0421

  • Confirm whether Cisco Prime Access Registrar is running on any internet-facing host or subdomain.
  • Match discovered service fingerprints against the version affected by CVE-2018-0421.
  • Prioritise remediation if the asset is public, business-critical, or near authentication/payment flows.

How ThreatPort helps with CVE-2018-0421

ThreatPort's external attack surface scanner checks your internet-facing assets — agentlessly, from the outside in — for the exposed services and versions that CVE-2018-0421 affects, then prioritises the finding by real risk using CISA KEV and FIRST.org EPSS.

Run a free external exposure scan

Are you exposed to CVE-2018-0421?

Run an instant, non-intrusive external scan to check your attack surface for CVE-2018-0421.

Start free scan

No credit card. Agentless.

Related vulnerabilities

HIGH
CVE-2007-4467
Jinitiator vulnerability
HIGH
CVE-2007-4629
Mapserver vulnerability
HIGH
CVE-2007-2954
Client vulnerability