7.5
Élevée
Exploitée
CVE-2018-0156 Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Non constatée à ce jour
Faiblesse
CWE-399
Description
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted packet to an affected device on TCP port 4786. Only Smart Install client switches are affected. Cisco devices that are configured as a Smart Install director are not affected by this vulnerability. Cisco Bug IDs: CSCvd40673.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco IOS and IOS XE | Versions non publiées |
Références
- ics-cert.us-cert.gov ics-cert.us-cert.gov
- tools.cisco.com tools.cisco.com
- 1040596 www.securitytracker.com
- 103569 www.securityfocus.com
- ics-cert.us-cert.gov ics-cert.us-cert.gov
Chronologie
- Publiée
- Ajoutée au catalogue KEV
- Dernière modification
Autres CVE de Cisco IOS and IOS XE
Les 25 CVE de Cisco IOS and IOS XE →
CVE-2018-0172
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
8.6
Élevée
CVE-2018-0174
Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability
8.6
Élevée
CVE-2018-0173
Cisco IOS and IOS XE Software Improper Input Validation Vulnerability
8.6
Élevée
CVE-2018-0171
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
7.5
Élevée