CVE-2018-0171
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
CVSS
—
Sin CVSS
EPSS
99.5%
p100
KEV
SÍ
3 nov 2021
Exploit Today
80
0-100
Publicado: — · Última mod.: —
99.5%EPSS · 30 días99.5%
2026-06-302026-07-16
Producto
Cisco / IOS and IOS XE
Vulnerabilidad
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
Añadido a KEV
3 nov 2021
Remediar antes de
3 may 2022
Uso conocido en ransomware
No
Descripción resumida
Cisco IOS and IOS XE Software improperly validates packet data, allowing an unauthenticated, remote attacker to trigger a reload of an affected device, cause a denial-of-service (DoS) condition, or perform code execution on the affected device.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2018-0171
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2017-3881—99.9%
KEV—80Cisco IOS and IOS XE Remote Code Execution Vulnerability—CVE-2025-20352—98.4%
KEV—80Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability—CVE-2023-20109—81.7%
KEV—75Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability—