CVE-2018-0171
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
CVSS
—
Sem CVSS
EPSS
99.5%
p100
KEV
SIM
3 de nov. de 2021
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
Cisco / IOS and IOS XE
Vulnerabilidade
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
Adicionado ao KEV
3 de nov. de 2021
Corrigir até
3 de mai. de 2022
Uso conhecido em ransomware
Não
Descrição resumida
Cisco IOS and IOS XE Software improperly validates packet data, allowing an unauthenticated, remote attacker to trigger a reload of an affected device, cause a denial-of-service (DoS) condition, or perform code execution on the affected device.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2018-0171