Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2018-0171

Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

Description

Cisco IOS and IOS XE Software improperly validates packet data, allowing an unauthenticated, remote attacker to trigger a reload of an affected device, cause a denial-of-service (DoS) condition, or perform code execution on the affected device.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 3 May 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.