CVE-2018-0131

5.9 mediumEPSS 1.7%

A vulnerability in the implementation of RSA-encrypted nonces in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to obtain the encrypted nonces of an Internet Key Exchange Version 1 (IKEv1) session. The vulnerability exists because the affected software responds incorrectly to decryption failures. An attacker could exploit this vulnerability sending crafted ciphertexts to a device configured with IKEv1 that uses RSA-encrypted nonces. A successful exploit could allow the attacker to obtain the encrypted nonces. Cisco Bug IDs: CSCve77140.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-326
Published: 2018-08-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cisco:ios
cisco:ios_xe

References

http://www.securityfocus.com/bid/105074
http://www.securitytracker.com/id/1041539
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180813-rsa-nonce
http://www.securityfocus.com/bid/105074
http://www.securitytracker.com/id/1041539

Check your stack JSON