CVE-2018-0156 KEV
7.5
HIGH · CVSS 3.1 · EPSS 8.6% (pctl 95)
Patch first
On CISA KEV — known exploited in the wild, due 2022-03-17.
Description
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted packet to an affected device on TCP port 4786. Only Smart Install client switches are affected. Cisco devices that are configured as a Smart Install director are not affected by this vulnerability. Cisco Bug IDs: CSCvd40673.
Scoring
| CVSS | 7.5 (HIGH, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| EPSS | 8.6% — more likely to be exploited than 95% of all CVEs |
| Weakness | CWE-399 |
| On CISA KEV | yes — remediate by 2022-03-17 |
| Public exploit | none known |
| Published | 2018-03-28 |
| Last modified | 2026-06-17 |
CISA KEV
| Name | Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability |
|---|---|
| Added | 2022-03-03 |
| Due | 2022-03-17 |
| Vendor / product | Cisco / IOS Software and Cisco IOS XE Software |
| Ransomware use | none reported |
Affected (40)
| Vendor | Product |
|---|---|
| cisco | catalyst 2960-plus 24lc-l |
| cisco | catalyst 2960-plus 24lc-s |
| cisco | catalyst 2960-plus 24pc-l |
| cisco | catalyst 2960-plus 24pc-s |
| cisco | catalyst 2960-plus 24tc-l |
| cisco | catalyst 2960-plus 24tc-s |
| cisco | catalyst 2960-plus 48pst-l |
| cisco | catalyst 2960-plus 48pst-s |
| cisco | catalyst 2960-plus 48tc-l |
| cisco | catalyst 2960-plus 48tc-s |
| cisco | catalyst 2960c-12pc-l |
| cisco | catalyst 2960c-8pc-l |
| cisco | catalyst 2960c-8tc-l |
| cisco | catalyst 2960c-8tc-s |
| cisco | catalyst 2960cg-8tc-l |
| cisco | catalyst 2960cpd-8pt-l |
| cisco | catalyst 2960cpd-8tt-l |
| cisco | catalyst 2960s-24pd-l |
| cisco | catalyst 2960s-24ps-l |
| cisco | catalyst 2960s-24td-l |
| cisco | catalyst 2960s-24ts-l |
| cisco | catalyst 2960s-24ts-s |
| cisco | catalyst 2960s-48fpd-l |
| cisco | catalyst 2960s-48fps-l |
| cisco | catalyst 2960s-48lpd-l |
| cisco | catalyst 2960s-48lps-l |
| cisco | catalyst 2960s-48td-l |
| cisco | catalyst 2960s-48ts-l |
| cisco | catalyst 2960s-48ts-s |
| cisco | catalyst 2960s-f24ps-l |
| cisco | catalyst 2960s-f24ts-l |
| cisco | catalyst 2960s-f24ts-s |
| cisco | catalyst 2960s-f48fps-l |
| cisco | catalyst 2960s-f48lps-l |
| cisco | catalyst 2960s-f48ts-l |
| cisco | catalyst 2960s-f48ts-s |
| cisco | catalyst 2960x-24pd-l |
| cisco | catalyst 2960x-24ps-l |
| cisco | catalyst 2960x-24psq-l cool |
| cisco | ios |
References
- http://www.securityfocus.com/bid/103569
- http://www.securitytracker.com/id/1040596
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi
- http://www.securityfocus.com/bid/103569
- http://www.securitytracker.com/id/1040596
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0156
→ the Explorer · watch your stack · NVD