Medium 6.3Known exploited (CISA KEV)Published Mar 28, 2018

CVE-2018-0161A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to…

Updated under an hour ago (2026-10-19 09:30 UTC)

Does this affect you?

It affects cisco ios. Add what you run to find out whether that includes you.

CISA lists it as known exploited since Mar 3, 2022; federal agencies had to remediate by Mar 17, 2022. Treat that date as your deadline.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for cisco ios

Exploited in the last 30 days

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial of service (DoS) condition, aka a GET MIB Object ID Denial of Service Vulnerability. The vulnerability is due to a condition that could occur when the affected software processes an SNMP read request that contains a request for the ciscoFlashMIB object ID (OID). An attacker could trigger this vulnerability by issuing an SNMP GET request for the ciscoFlashMIB OID on an affected device. A successful exploit could cause the affected device to restart due to a SYS-3-CPUHOG. This vulnerability affects the following Cisco devices if they are running a vulnerable release of Cisco IOS Software and are configured to use SNMP Version 2 (SNMPv2) or SNMP Version 3 (SNMPv3): Cisco Catalyst 2960-L Series Switches, Cisco Catalyst Digital Building Series Switches 8P, Cisco Catalyst Digital Building Series Switches 8U. Cisco Bug IDs: CSCvd89541.

CVSS: 6.3 MEDIUM (v3.1, CISA ADP)CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H
Weakness (CWE): CWE-399
Known exploited: Added to CISA KEV Mar 3, 2022; federal remediation due Mar 17, 2022Apply updates per vendor instructions.
EPSS (exploitation in the next 30 days): 4.12% (percentile 91)
Assigned by: cisco
NVD analysis: Analyzed
Record last updated: Jan 12, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

cisco ios cisco:ios	15.2(5)e	NVD

References

http://www.securityfocus.com/bid/103573vdb-entry, x-refsource-bid, broken-link, third-party-advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmpx-refsource-confirm, mitigation, vendor-advisory
http://www.securitytracker.com/id/1040589vdb-entry, x-refsource-sectrack, broken-link, third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0161us-government-resource

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.