CVE-2018-0197

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software (affected versions not specified)

Description A vulnerability in the VLAN Trunking Protocol (VTP) subsystem could allow an unauthenticated, adjacent attacker to corrupt the internal VTP database on an affected device and cause a denial of service (DoS) condition. The issue is due to a logic error in how the affected software handles a subset of VTP packets. An attacker could exploit this by sending VTP packets in a sequence that triggers a timeout in the VTP message processing code, potentially impacting the ability to create, modify, or delete VLANs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.