Lucene search

K
cve[email protected]CVE-2018-0156
HistoryMar 28, 2018 - 10:29 p.m.

CVE-2018-0156

2018-03-2822:29:00
CWE-20
CWE-399
web.nvd.nist.gov
866
In Wild
cisco
smart install
vulnerability
cisco ios
cisco ios xe
dos
remote attack
cve-2018-0156

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.005 Low

EPSS

Percentile

76.6%

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted packet to an affected device on TCP port 4786. Only Smart Install client switches are affected. Cisco devices that are configured as a Smart Install director are not affected by this vulnerability. Cisco Bug IDs: CSCvd40673.

Affected configurations

NVD
Node
ciscocatalyst_2960-plus_24lc-lMatch-
OR
ciscocatalyst_2960-plus_24lc-sMatch-
OR
ciscocatalyst_2960-plus_24pc-lMatch-
OR
ciscocatalyst_2960-plus_24pc-sMatch-
OR
ciscocatalyst_2960-plus_24tc-lMatch-
OR
ciscocatalyst_2960-plus_24tc-sMatch-
OR
ciscocatalyst_2960-plus_48pst-lMatch-
OR
ciscocatalyst_2960-plus_48pst-sMatch-
OR
ciscocatalyst_2960-plus_48tc-lMatch-
OR
ciscocatalyst_2960-plus_48tc-sMatch-
OR
ciscocatalyst_2960c-12pc-lMatch-
OR
ciscocatalyst_2960c-8pc-lMatch-
OR
ciscocatalyst_2960c-8tc-lMatch-
OR
ciscocatalyst_2960c-8tc-sMatch-
OR
ciscocatalyst_2960cg-8tc-lMatch-
OR
ciscocatalyst_2960cpd-8pt-lMatch-
OR
ciscocatalyst_2960cpd-8tt-lMatch-
OR
ciscocatalyst_2960s-24pd-lMatch-
OR
ciscocatalyst_2960s-24ps-lMatch-
OR
ciscocatalyst_2960s-24td-lMatch-
OR
ciscocatalyst_2960s-24ts-lMatch-
OR
ciscocatalyst_2960s-24ts-sMatch-
OR
ciscocatalyst_2960s-48fpd-lMatch-
OR
ciscocatalyst_2960s-48fps-lMatch-
OR
ciscocatalyst_2960s-48lpd-lMatch-
OR
ciscocatalyst_2960s-48lps-lMatch-
OR
ciscocatalyst_2960s-48td-lMatch-
OR
ciscocatalyst_2960s-48ts-lMatch-
OR
ciscocatalyst_2960s-48ts-sMatch-
OR
ciscocatalyst_2960s-f24ps-lMatch-
OR
ciscocatalyst_2960s-f24ts-lMatch-
OR
ciscocatalyst_2960s-f24ts-sMatch-
OR
ciscocatalyst_2960s-f48fps-lMatch-
OR
ciscocatalyst_2960s-f48lps-lMatch-
OR
ciscocatalyst_2960s-f48ts-lMatch-
OR
ciscocatalyst_2960s-f48ts-sMatch-
OR
ciscocatalyst_2960x-24pd-lMatch-
OR
ciscocatalyst_2960x-24ps-lMatch-
OR
ciscocatalyst_2960x-24psq-l_coolMatch-
OR
ciscocatalyst_2960x-24td-lMatch-
OR
ciscocatalyst_2960x-24ts-lMatch-
OR
ciscocatalyst_2960x-24ts-llMatch-
OR
ciscocatalyst_2960x-48fpd-lMatch-
OR
ciscocatalyst_2960x-48fps-lMatch-
OR
ciscocatalyst_2960x-48lpd-lMatch-
OR
ciscocatalyst_2960x-48lps-lMatch-
OR
ciscocatalyst_2960x-48td-lMatch-
OR
ciscocatalyst_2960x-48ts-lMatch-
OR
ciscocatalyst_2960x-48ts-llMatch-
OR
ciscocatalyst_2960xr-24pd-iMatch-
OR
ciscocatalyst_2960xr-24ps-iMatch-
OR
ciscocatalyst_2960xr-24td-iMatch-
OR
ciscocatalyst_2960xr-24ts-iMatch-
OR
ciscocatalyst_2960xr-48fpd-iMatch-
OR
ciscocatalyst_2960xr-48fps-iMatch-
OR
ciscocatalyst_2960xr-48lpd-iMatch-
OR
ciscocatalyst_2960xr-48lps-iMatch-
OR
ciscocatalyst_2960xr-48td-iMatch-
OR
ciscocatalyst_2960xr-48ts-iMatch-
OR
ciscocatalyst_3560c-12pc-sMatch-
OR
ciscocatalyst_3560c-8pc-sMatch-
OR
ciscocatalyst_3560cg-8pc-sMatch-
OR
ciscocatalyst_3560cg-8tc-sMatch-
OR
ciscocatalyst_3560cpd-8pt-sMatch-
OR
ciscocatalyst_3560x-24p-eMatch-
OR
ciscocatalyst_3560x-24p-lMatch-
OR
ciscocatalyst_3560x-24p-sMatch-
OR
ciscocatalyst_3560x-24t-eMatch-
OR
ciscocatalyst_3560x-24t-lMatch-
OR
ciscocatalyst_3560x-24t-sMatch-
OR
ciscocatalyst_3560x-24u-eMatch-
OR
ciscocatalyst_3560x-24u-lMatch-
OR
ciscocatalyst_3560x-24u-sMatch-
OR
ciscocatalyst_3560x-48p-eMatch-
OR
ciscocatalyst_3560x-48p-lMatch-
OR
ciscocatalyst_3560x-48p-sMatch-
OR
ciscocatalyst_3560x-48pf-eMatch-
OR
ciscocatalyst_3560x-48pf-lMatch-
OR
ciscocatalyst_3560x-48pf-sMatch-
OR
ciscocatalyst_3560x-48t-eMatch-
OR
ciscocatalyst_3560x-48t-lMatch-
OR
ciscocatalyst_3560x-48t-sMatch-
OR
ciscocatalyst_3560x-48u-eMatch-
OR
ciscocatalyst_3560x-48u-lMatch-
OR
ciscocatalyst_3560x-48u-sMatch-
OR
ciscocatalyst_3750x-12s-eMatch-
OR
ciscocatalyst_3750x-12s-sMatch-
OR
ciscocatalyst_3750x-24p-eMatch-
OR
ciscocatalyst_3750x-24p-lMatch-
OR
ciscocatalyst_3750x-24p-sMatch-
OR
ciscocatalyst_3750x-24s-eMatch-
OR
ciscocatalyst_3750x-24s-sMatch-
OR
ciscocatalyst_3750x-24t-eMatch-
OR
ciscocatalyst_3750x-24t-lMatch-
OR
ciscocatalyst_3750x-24t-sMatch-
OR
ciscocatalyst_3750x-24u-eMatch-
OR
ciscocatalyst_3750x-24u-lMatch-
OR
ciscocatalyst_3750x-24u-sMatch-
OR
ciscocatalyst_3750x-48p-eMatch-
OR
ciscocatalyst_3750x-48p-lMatch-
OR
ciscocatalyst_3750x-48p-sMatch-
OR
ciscocatalyst_3750x-48pf-eMatch-
OR
ciscocatalyst_3750x-48pf-lMatch-
OR
ciscocatalyst_3750x-48pf-sMatch-
OR
ciscocatalyst_3750x-48t-eMatch-
OR
ciscocatalyst_3750x-48t-lMatch-
OR
ciscocatalyst_3750x-48t-sMatch-
OR
ciscocatalyst_3750x-48u-eMatch-
OR
ciscocatalyst_3750x-48u-lMatch-
OR
ciscocatalyst_3750x-48u-sMatch-
OR
ciscocatalyst_4500_supervisor_engine_6-eMatch-
OR
ciscocatalyst_4500_supervisor_engine_6l-eMatch-
OR
ciscocatalyst_4900mMatch-
OR
ciscocatalyst_4948eMatch-
OR
ciscocatalyst_4948e-fMatch-
OR
ciscoembedded_service_2020_24tc_conMatch-
OR
ciscoembedded_service_2020_24tc_con_bMatch-
OR
ciscoembedded_service_2020_24tc_ncpMatch-
OR
ciscoembedded_service_2020_24tc_ncp_bMatch-
OR
ciscoembedded_service_2020_conMatch-
OR
ciscoembedded_service_2020_con_bMatch-
OR
ciscoembedded_service_2020_ncpMatch-
OR
ciscoembedded_service_2020_ncp_bMatch-
OR
ciscoie-3010-16s-8pcMatch-
OR
ciscoie-3010-24tcMatch-
OR
ciscoie_2000-16ptc-gMatch-
OR
ciscoie_2000-16t67Match-
OR
ciscoie_2000-16t67pMatch-
OR
ciscoie_2000-16tcMatch-
OR
ciscoie_2000-16tc-gMatch-
OR
ciscoie_2000-16tc-g-eMatch-
OR
ciscoie_2000-16tc-g-nMatch-
OR
ciscoie_2000-16tc-g-xMatch-
OR
ciscoie_2000-24t67Match-
OR
ciscoie_2000-4s-ts-gMatch-
OR
ciscoie_2000-4tMatch-
OR
ciscoie_2000-4t-gMatch-
OR
ciscoie_2000-4tsMatch-
OR
ciscoie_2000-4ts-gMatch-
OR
ciscoie_2000-8t67Match-
OR
ciscoie_2000-8t67pMatch-
OR
ciscoie_2000-8tcMatch-
OR
ciscoie_2000-8tc-gMatch-
OR
ciscoie_2000-8tc-g-eMatch-
OR
ciscoie_2000-8tc-g-nMatch-
OR
ciscoie_3000-4tcMatch-
OR
ciscoie_3000-8tcMatch-
AND
ciscoiosMatch15.2\(2\)e4
OR
ciscoiosMatch15.2\(2a\)ja
Node
ciscocatalyst_2960-plus_24lc-lMatch-
OR
ciscocatalyst_2960-plus_24lc-sMatch-
OR
ciscocatalyst_2960-plus_24pc-lMatch-
OR
ciscocatalyst_2960-plus_24pc-sMatch-
OR
ciscocatalyst_2960-plus_24tc-lMatch-
OR
ciscocatalyst_2960-plus_24tc-sMatch-
OR
ciscocatalyst_2960-plus_48pst-lMatch-
OR
ciscocatalyst_2960-plus_48pst-sMatch-
OR
ciscocatalyst_2960-plus_48tc-lMatch-
OR
ciscocatalyst_2960-plus_48tc-sMatch-
OR
ciscocatalyst_2960c-12pc-lMatch-
OR
ciscocatalyst_2960c-8pc-lMatch-
OR
ciscocatalyst_2960c-8tc-lMatch-
OR
ciscocatalyst_2960c-8tc-sMatch-
OR
ciscocatalyst_2960cg-8tc-lMatch-
OR
ciscocatalyst_2960cpd-8pt-lMatch-
OR
ciscocatalyst_2960cpd-8tt-lMatch-
OR
ciscocatalyst_2960s-24pd-lMatch-
OR
ciscocatalyst_2960s-24ps-lMatch-
OR
ciscocatalyst_2960s-24td-lMatch-
OR
ciscocatalyst_2960s-24ts-lMatch-
OR
ciscocatalyst_2960s-24ts-sMatch-
OR
ciscocatalyst_2960s-48fpd-lMatch-
OR
ciscocatalyst_2960s-48fps-lMatch-
OR
ciscocatalyst_2960s-48lpd-lMatch-
OR
ciscocatalyst_2960s-48lps-lMatch-
OR
ciscocatalyst_2960s-48td-lMatch-
OR
ciscocatalyst_2960s-48ts-lMatch-
OR
ciscocatalyst_2960s-48ts-sMatch-
OR
ciscocatalyst_2960s-f24ps-lMatch-
OR
ciscocatalyst_2960s-f24ts-lMatch-
OR
ciscocatalyst_2960s-f24ts-sMatch-
OR
ciscocatalyst_2960s-f48fps-lMatch-
OR
ciscocatalyst_2960s-f48lps-lMatch-
OR
ciscocatalyst_2960s-f48ts-lMatch-
OR
ciscocatalyst_2960s-f48ts-sMatch-
OR
ciscocatalyst_2960x-24pd-lMatch-
OR
ciscocatalyst_2960x-24ps-lMatch-
OR
ciscocatalyst_2960x-24psq-l_coolMatch-
OR
ciscocatalyst_2960x-24td-lMatch-
OR
ciscocatalyst_2960x-24ts-lMatch-
OR
ciscocatalyst_2960x-24ts-llMatch-
OR
ciscocatalyst_2960x-48fpd-lMatch-
OR
ciscocatalyst_2960x-48fps-lMatch-
OR
ciscocatalyst_2960x-48lpd-lMatch-
OR
ciscocatalyst_2960x-48lps-lMatch-
OR
ciscocatalyst_2960x-48td-lMatch-
OR
ciscocatalyst_2960x-48ts-lMatch-
OR
ciscocatalyst_2960x-48ts-llMatch-
OR
ciscocatalyst_2960xr-24pd-iMatch-
OR
ciscocatalyst_2960xr-24ps-iMatch-
OR
ciscocatalyst_2960xr-24td-iMatch-
OR
ciscocatalyst_2960xr-24ts-iMatch-
OR
ciscocatalyst_2960xr-48fpd-iMatch-
OR
ciscocatalyst_2960xr-48fps-iMatch-
OR
ciscocatalyst_2960xr-48lpd-iMatch-
OR
ciscocatalyst_2960xr-48lps-iMatch-
OR
ciscocatalyst_2960xr-48td-iMatch-
OR
ciscocatalyst_2960xr-48ts-iMatch-
OR
ciscocatalyst_3560c-12pc-sMatch-
OR
ciscocatalyst_3560c-8pc-sMatch-
OR
ciscocatalyst_3560cg-8pc-sMatch-
OR
ciscocatalyst_3560cg-8tc-sMatch-
OR
ciscocatalyst_3560cpd-8pt-sMatch-
OR
ciscocatalyst_3560x-24p-eMatch-
OR
ciscocatalyst_3560x-24p-lMatch-
OR
ciscocatalyst_3560x-24p-sMatch-
OR
ciscocatalyst_3560x-24t-eMatch-
OR
ciscocatalyst_3560x-24t-lMatch-
OR
ciscocatalyst_3560x-24t-sMatch-
OR
ciscocatalyst_3560x-24u-eMatch-
OR
ciscocatalyst_3560x-24u-lMatch-
OR
ciscocatalyst_3560x-24u-sMatch-
OR
ciscocatalyst_3560x-48p-eMatch-
OR
ciscocatalyst_3560x-48p-lMatch-
OR
ciscocatalyst_3560x-48p-sMatch-
OR
ciscocatalyst_3560x-48pf-eMatch-
OR
ciscocatalyst_3560x-48pf-lMatch-
OR
ciscocatalyst_3560x-48pf-sMatch-
OR
ciscocatalyst_3560x-48t-eMatch-
OR
ciscocatalyst_3560x-48t-lMatch-
OR
ciscocatalyst_3560x-48t-sMatch-
OR
ciscocatalyst_3560x-48u-eMatch-
OR
ciscocatalyst_3560x-48u-lMatch-
OR
ciscocatalyst_3560x-48u-sMatch-
OR
ciscocatalyst_3750x-12s-eMatch-
OR
ciscocatalyst_3750x-12s-sMatch-
OR
ciscocatalyst_3750x-24p-eMatch-
OR
ciscocatalyst_3750x-24p-lMatch-
OR
ciscocatalyst_3750x-24p-sMatch-
OR
ciscocatalyst_3750x-24s-eMatch-
OR
ciscocatalyst_3750x-24s-sMatch-
OR
ciscocatalyst_3750x-24t-eMatch-
OR
ciscocatalyst_3750x-24t-lMatch-
OR
ciscocatalyst_3750x-24t-sMatch-
OR
ciscocatalyst_3750x-24u-eMatch-
OR
ciscocatalyst_3750x-24u-lMatch-
OR
ciscocatalyst_3750x-24u-sMatch-
OR
ciscocatalyst_3750x-48p-eMatch-
OR
ciscocatalyst_3750x-48p-lMatch-
OR
ciscocatalyst_3750x-48p-sMatch-
OR
ciscocatalyst_3750x-48pf-eMatch-
OR
ciscocatalyst_3750x-48pf-lMatch-
OR
ciscocatalyst_3750x-48pf-sMatch-
OR
ciscocatalyst_3750x-48t-eMatch-
OR
ciscocatalyst_3750x-48t-lMatch-
OR
ciscocatalyst_3750x-48t-sMatch-
OR
ciscocatalyst_3750x-48u-eMatch-
OR
ciscocatalyst_3750x-48u-lMatch-
OR
ciscocatalyst_3750x-48u-sMatch-
OR
ciscocatalyst_4500_supervisor_engine_6-eMatch-
OR
ciscocatalyst_4500_supervisor_engine_6l-eMatch-
OR
ciscocatalyst_4900mMatch-
OR
ciscocatalyst_4948eMatch-
OR
ciscocatalyst_4948e-fMatch-
OR
ciscoembedded_service_2020_24tc_conMatch-
OR
ciscoembedded_service_2020_24tc_con_bMatch-
OR
ciscoembedded_service_2020_24tc_ncpMatch-
OR
ciscoembedded_service_2020_24tc_ncp_bMatch-
OR
ciscoembedded_service_2020_conMatch-
OR
ciscoembedded_service_2020_con_bMatch-
OR
ciscoembedded_service_2020_ncpMatch-
OR
ciscoembedded_service_2020_ncp_bMatch-
OR
ciscoie-3010-16s-8pcMatch-
OR
ciscoie-3010-24tcMatch-
OR
ciscoie_2000-16ptc-gMatch-
OR
ciscoie_2000-16t67Match-
OR
ciscoie_2000-16t67pMatch-
OR
ciscoie_2000-16tcMatch-
OR
ciscoie_2000-16tc-gMatch-
OR
ciscoie_2000-16tc-g-eMatch-
OR
ciscoie_2000-16tc-g-nMatch-
OR
ciscoie_2000-16tc-g-xMatch-
OR
ciscoie_2000-24t67Match-
OR
ciscoie_2000-4s-ts-gMatch-
OR
ciscoie_2000-4tMatch-
OR
ciscoie_2000-4t-gMatch-
OR
ciscoie_2000-4tsMatch-
OR
ciscoie_2000-4ts-gMatch-
OR
ciscoie_2000-8t67Match-
OR
ciscoie_2000-8t67pMatch-
OR
ciscoie_2000-8tcMatch-
OR
ciscoie_2000-8tc-gMatch-
OR
ciscoie_2000-8tc-g-eMatch-
OR
ciscoie_2000-8tc-g-nMatch-
OR
ciscoie_3000-4tcMatch-
OR
ciscoie_3000-8tcMatch-
AND
ciscoios_xeMatch15.2\(2\)e4
OR
ciscoios_xeMatch15.2\(2a\)ja

CNA Affected

[
  {
    "product": "Cisco IOS and IOS XE",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco IOS and IOS XE"
      }
    ]
  }
]

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.005 Low

EPSS

Percentile

76.6%