CVE-2018-0156
HIGH
7.5
CVSS Score
Published: March 28, 2018 at 10:00 PM UTC
Updated: June 17, 2026 at 01:29 AM UTC
149 products affected across 1 vendorIOSIOS XeCatalyst 2960Xr-48Lpd-I
Using Cisco IOS and IOS XE by N/A?
Get instant alerts when new vulnerabilities affect Cisco IOS and IOS XE - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.5
Exploitation
CISA KEV
Exploit prediction
EPSS 9%
SSVC
Active
Actively Exploited
CISA Known Exploited Vulnerabilities (KEV) Catalog
EPSS Score9.4%
EPSS (Exploit Prediction Scoring System) estimates a 9.4% chance this CVE is exploited in the wild within the next 30 days — higher than 95% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial-of-service (DoS) condition.
Required Action
Apply updates per vendor instructions.
Ransomware Use
Unknown
Added to KEV
Mar 3, 2022
Remediation Due
Mar 17, 2022
1685 days overdue
Description
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted packet to an affected device on TCP port 4786. Only Smart Install client switches are affected. Cisco devices that are configured as a Smart Install director are not affected by this vulnerability. Cisco Bug IDs: CSCvd40673.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
cisco-catalyst-2960-plus-24lc-l (environment) · cisco-catalyst-2960-plus-24lc-s (environment) · cisco-catalyst-2960-plus-24pc-l (environment) · cisco-catalyst-2960-plus-24pc-s (environment) · cisco-catalyst-2960-plus-24tc-l (environment) · cisco-catalyst-2960-plus-24tc-s (environment) · cisco-catalyst-2960-plus-48pst-l (environment) · cisco-catalyst-2960-plus-48pst-s (environment) · cisco-catalyst-2960-plus-48tc-l (environment) · cisco-catalyst-2960-plus-48tc-s (environment) · cisco-catalyst-2960c-12pc-l (environment) · cisco-catalyst-2960c-8pc-l (environment) · cisco-catalyst-2960c-8tc-l (environment) · cisco-catalyst-2960c-8tc-s (environment) · cisco-catalyst-2960cg-8tc-l (environment) · cisco-catalyst-2960cpd-8pt-l (environment) · cisco-catalyst-2960cpd-8tt-l (environment) · cisco-catalyst-2960s-24pd-l (environment) · cisco-catalyst-2960s-24ps-l (environment) · cisco-catalyst-2960s-24td-l (environment) · cisco-catalyst-2960s-24ts-l (environment) · cisco-catalyst-2960s-24ts-s (environment) · cisco-catalyst-2960s-48fpd-l (environment) · cisco-catalyst-2960s-48fps-l (environment) · cisco-catalyst-2960s-48lpd-l (environment) · cisco-catalyst-2960s-48lps-l (environment) · cisco-catalyst-2960s-48td-l (environment) · cisco-catalyst-2960s-48ts-l (environment) · cisco-catalyst-2960s-48ts-s (environment) · cisco-catalyst-2960s-f24ps-l (environment) · cisco-catalyst-2960s-f24ts-l (environment) · cisco-catalyst-2960s-f24ts-s (environment) · cisco-catalyst-2960s-f48fps-l (environment) · cisco-catalyst-2960s-f48lps-l (environment) · cisco-catalyst-2960s-f48ts-l (environment) · cisco-catalyst-2960s-f48ts-s (environment) · cisco-catalyst-2960x-24pd-l (environment) · cisco-catalyst-2960x-24ps-l (environment) · cisco-catalyst-2960x-24psq-l-cool (environment) · cisco-catalyst-2960x-24td-l (environment) · cisco-catalyst-2960x-24ts-l (environment) · cisco-catalyst-2960x-24ts-ll (environment) · cisco-catalyst-2960x-48fpd-l (environment) · cisco-catalyst-2960x-48fps-l (environment) · cisco-catalyst-2960x-48lpd-l (environment) · cisco-catalyst-2960x-48lps-l (environment) · cisco-catalyst-2960x-48td-l (environment) · cisco-catalyst-2960x-48ts-l (environment) · cisco-catalyst-2960x-48ts-ll (environment) · cisco-catalyst-2960xr-24pd-i (environment) · cisco-catalyst-2960xr-24ps-i (environment) · cisco-catalyst-2960xr-24td-i (environment) · cisco-catalyst-2960xr-24ts-i (environment) · cisco-catalyst-2960xr-48fpd-i (environment) · cisco-catalyst-2960xr-48fps-i (environment) · cisco-catalyst-2960xr-48lpd-i (environment) · cisco-catalyst-2960xr-48lps-i (environment) · cisco-catalyst-2960xr-48td-i (environment) · cisco-catalyst-2960xr-48ts-i (environment) · cisco-catalyst-3560c-12pc-s (environment) · cisco-catalyst-3560c-8pc-s (environment) · cisco-catalyst-3560cg-8pc-s (environment) · cisco-catalyst-3560cg-8tc-s (environment) · cisco-catalyst-3560cpd-8pt-s (environment) · cisco-catalyst-3560x-24p-e (environment) · cisco-catalyst-3560x-24p-l (environment) · cisco-catalyst-3560x-24p-s (environment) · cisco-catalyst-3560x-24t-e (environment) · cisco-catalyst-3560x-24t-l (environment) · cisco-catalyst-3560x-24t-s (environment) · cisco-catalyst-3560x-24u-e (environment) · cisco-catalyst-3560x-24u-l (environment) · cisco-catalyst-3560x-24u-s (environment) · cisco-catalyst-3560x-48p-e (environment) · cisco-catalyst-3560x-48p-l (environment) · cisco-catalyst-3560x-48p-s (environment) · cisco-catalyst-3560x-48pf-e (environment) · cisco-catalyst-3560x-48pf-l (environment) · cisco-catalyst-3560x-48pf-s (environment) · cisco-catalyst-3560x-48t-e (environment) · cisco-catalyst-3560x-48t-l (environment) · cisco-catalyst-3560x-48t-s (environment) · cisco-catalyst-3560x-48u-e (environment) · cisco-catalyst-3560x-48u-l (environment) · cisco-catalyst-3560x-48u-s (environment) · cisco-catalyst-3750x-12s-e (environment) · cisco-catalyst-3750x-12s-s (environment) · cisco-catalyst-3750x-24p-e (environment) · cisco-catalyst-3750x-24p-l (environment) · cisco-catalyst-3750x-24p-s (environment) · cisco-catalyst-3750x-24s-e (environment) · cisco-catalyst-3750x-24s-s (environment) · cisco-catalyst-3750x-24t-e (environment) · cisco-catalyst-3750x-24t-l (environment) · cisco-catalyst-3750x-24t-s (environment) · cisco-catalyst-3750x-24u-e (environment) · cisco-catalyst-3750x-24u-l (environment) · cisco-catalyst-3750x-24u-s (environment) · cisco-catalyst-3750x-48p-e (environment) · cisco-catalyst-3750x-48p-l (environment) · cisco-catalyst-3750x-48p-s (environment) · cisco-catalyst-3750x-48pf-e (environment) · cisco-catalyst-3750x-48pf-l (environment) · cisco-catalyst-3750x-48pf-s (environment) · cisco-catalyst-3750x-48t-e (environment) · cisco-catalyst-3750x-48t-l (environment) · cisco-catalyst-3750x-48t-s (environment) · cisco-catalyst-3750x-48u-e (environment) · cisco-catalyst-3750x-48u-l (environment) · cisco-catalyst-3750x-48u-s (environment) · cisco-catalyst-4500-supervisor-engine-6-e (environment) · cisco-catalyst-4500-supervisor-engine-6l-e (environment) · cisco-catalyst-4900m (environment) · cisco-catalyst-4948e (environment) · cisco-catalyst-4948e-f (environment) · cisco-embedded-service-2020-24tc-con (environment) · cisco-embedded-service-2020-24tc-con-b (environment) · cisco-embedded-service-2020-24tc-ncp (environment) · cisco-embedded-service-2020-24tc-ncp-b (environment) · cisco-embedded-service-2020-con (environment) · cisco-embedded-service-2020-con-b (environment) · cisco-embedded-service-2020-ncp (environment) · cisco-embedded-service-2020-ncp-b (environment) · cisco-ie-2000-16ptc-g (same device) · cisco-ie-2000-16t67 (same device) · cisco-ie-2000-16t67p (same device) · cisco-ie-2000-16tc (same device) · cisco-ie-2000-16tc-g (same device) · cisco-ie-2000-16tc-g-e (same device) · cisco-ie-2000-16tc-g-n (same device) · cisco-ie-2000-16tc-g-x (same device) · cisco-ie-2000-24t67 (same device) · cisco-ie-2000-4s-ts-g (same device) · cisco-ie-2000-4t (same device) · cisco-ie-2000-4t-g (same device) · cisco-ie-2000-4ts (same device) · cisco-ie-2000-4ts-g (same device) · cisco-ie-2000-8t67 (same device) · cisco-ie-2000-8t67p (same device) · cisco-ie-2000-8tc (same device) · cisco-ie-2000-8tc-g (same device) · cisco-ie-2000-8tc-g-e (same device) · cisco-ie-2000-8tc-g-n (same device) · cisco-ie-3000-4tc (same device) · cisco-ie-3000-8tc (same device) · cisco-ie-3010-16s-8pc (same device) · cisco-ie-3010-24tc (same device)
cisco-catalyst-2960-plus-24lc-l (environment) · cisco-catalyst-2960-plus-24lc-s (environment) · cisco-catalyst-2960-plus-24pc-l (environment) · cisco-catalyst-2960-plus-24pc-s (environment) · cisco-catalyst-2960-plus-24tc-l (environment) · cisco-catalyst-2960-plus-24tc-s (environment) · cisco-catalyst-2960-plus-48pst-l (environment) · cisco-catalyst-2960-plus-48pst-s (environment) · cisco-catalyst-2960-plus-48tc-l (environment) · cisco-catalyst-2960-plus-48tc-s (environment) · cisco-catalyst-2960c-12pc-l (environment) · cisco-catalyst-2960c-8pc-l (environment) · cisco-catalyst-2960c-8tc-l (environment) · cisco-catalyst-2960c-8tc-s (environment) · cisco-catalyst-2960cg-8tc-l (environment) · cisco-catalyst-2960cpd-8pt-l (environment) · cisco-catalyst-2960cpd-8tt-l (environment) · cisco-catalyst-2960s-24pd-l (environment) · cisco-catalyst-2960s-24ps-l (environment) · cisco-catalyst-2960s-24td-l (environment) · cisco-catalyst-2960s-24ts-l (environment) · cisco-catalyst-2960s-24ts-s (environment) · cisco-catalyst-2960s-48fpd-l (environment) · cisco-catalyst-2960s-48fps-l (environment) · cisco-catalyst-2960s-48lpd-l (environment) · cisco-catalyst-2960s-48lps-l (environment) · cisco-catalyst-2960s-48td-l (environment) · cisco-catalyst-2960s-48ts-l (environment) · cisco-catalyst-2960s-48ts-s (environment) · cisco-catalyst-2960s-f24ps-l (environment) · cisco-catalyst-2960s-f24ts-l (environment) · cisco-catalyst-2960s-f24ts-s (environment) · cisco-catalyst-2960s-f48fps-l (environment) · cisco-catalyst-2960s-f48lps-l (environment) · cisco-catalyst-2960s-f48ts-l (environment) · cisco-catalyst-2960s-f48ts-s (environment) · cisco-catalyst-2960x-24pd-l (environment) · cisco-catalyst-2960x-24ps-l (environment) · cisco-catalyst-2960x-24psq-l-cool (environment) · cisco-catalyst-2960x-24td-l (environment) · cisco-catalyst-2960x-24ts-l (environment) · cisco-catalyst-2960x-24ts-ll (environment) · cisco-catalyst-2960x-48fpd-l (environment) · cisco-catalyst-2960x-48fps-l (environment) · cisco-catalyst-2960x-48lpd-l (environment) · cisco-catalyst-2960x-48lps-l (environment) · cisco-catalyst-2960x-48td-l (environment) · cisco-catalyst-2960x-48ts-l (environment) · cisco-catalyst-2960x-48ts-ll (environment) · cisco-catalyst-2960xr-24pd-i (environment) · cisco-catalyst-2960xr-24ps-i (environment) · cisco-catalyst-2960xr-24td-i (environment) · cisco-catalyst-2960xr-24ts-i (environment) · cisco-catalyst-2960xr-48fpd-i (environment) · cisco-catalyst-2960xr-48fps-i (environment) · cisco-catalyst-2960xr-48lpd-i (environment) · cisco-catalyst-2960xr-48lps-i (environment) · cisco-catalyst-2960xr-48td-i (environment) · cisco-catalyst-2960xr-48ts-i (environment) · cisco-catalyst-3560c-12pc-s (environment) · cisco-catalyst-3560c-8pc-s (environment) · cisco-catalyst-3560cg-8pc-s (environment) · cisco-catalyst-3560cg-8tc-s (environment) · cisco-catalyst-3560cpd-8pt-s (environment) · cisco-catalyst-3560x-24p-e (environment) · cisco-catalyst-3560x-24p-l (environment) · cisco-catalyst-3560x-24p-s (environment) · cisco-catalyst-3560x-24t-e (environment) · cisco-catalyst-3560x-24t-l (environment) · cisco-catalyst-3560x-24t-s (environment) · cisco-catalyst-3560x-24u-e (environment) · cisco-catalyst-3560x-24u-l (environment) · cisco-catalyst-3560x-24u-s (environment) · cisco-catalyst-3560x-48p-e (environment) · cisco-catalyst-3560x-48p-l (environment) · cisco-catalyst-3560x-48p-s (environment) · cisco-catalyst-3560x-48pf-e (environment) · cisco-catalyst-3560x-48pf-l (environment) · cisco-catalyst-3560x-48pf-s (environment) · cisco-catalyst-3560x-48t-e (environment) · cisco-catalyst-3560x-48t-l (environment) · cisco-catalyst-3560x-48t-s (environment) · cisco-catalyst-3560x-48u-e (environment) · cisco-catalyst-3560x-48u-l (environment) · cisco-catalyst-3560x-48u-s (environment) · cisco-catalyst-3750x-12s-e (environment) · cisco-catalyst-3750x-12s-s (environment) · cisco-catalyst-3750x-24p-e (environment) · cisco-catalyst-3750x-24p-l (environment) · cisco-catalyst-3750x-24p-s (environment) · cisco-catalyst-3750x-24s-e (environment) · cisco-catalyst-3750x-24s-s (environment) · cisco-catalyst-3750x-24t-e (environment) · cisco-catalyst-3750x-24t-l (environment) · cisco-catalyst-3750x-24t-s (environment) · cisco-catalyst-3750x-24u-e (environment) · cisco-catalyst-3750x-24u-l (environment) · cisco-catalyst-3750x-24u-s (environment) · cisco-catalyst-3750x-48p-e (environment) · cisco-catalyst-3750x-48p-l (environment) · cisco-catalyst-3750x-48p-s (environment) · cisco-catalyst-3750x-48pf-e (environment) · cisco-catalyst-3750x-48pf-l (environment) · cisco-catalyst-3750x-48pf-s (environment) · cisco-catalyst-3750x-48t-e (environment) · cisco-catalyst-3750x-48t-l (environment) · cisco-catalyst-3750x-48t-s (environment) · cisco-catalyst-3750x-48u-e (environment) · cisco-catalyst-3750x-48u-l (environment) · cisco-catalyst-3750x-48u-s (environment) · cisco-catalyst-4500-supervisor-engine-6-e (environment) · cisco-catalyst-4500-supervisor-engine-6l-e (environment) · cisco-catalyst-4900m (environment) · cisco-catalyst-4948e (environment) · cisco-catalyst-4948e-f (environment) · cisco-embedded-service-2020-24tc-con (environment) · cisco-embedded-service-2020-24tc-con-b (environment) · cisco-embedded-service-2020-24tc-ncp (environment) · cisco-embedded-service-2020-24tc-ncp-b (environment) · cisco-embedded-service-2020-con (environment) · cisco-embedded-service-2020-con-b (environment) · cisco-embedded-service-2020-ncp (environment) · cisco-embedded-service-2020-ncp-b (environment) · cisco-ie-2000-16ptc-g (environment) · cisco-ie-2000-16t67 (environment) · cisco-ie-2000-16t67p (environment) · cisco-ie-2000-16tc (environment) · cisco-ie-2000-16tc-g (environment) · cisco-ie-2000-16tc-g-e (environment) · cisco-ie-2000-16tc-g-n (environment) · cisco-ie-2000-16tc-g-x (environment) · cisco-ie-2000-24t67 (environment) · cisco-ie-2000-4s-ts-g (environment) · cisco-ie-2000-4t (environment) · cisco-ie-2000-4t-g (environment) · cisco-ie-2000-4ts (environment) · cisco-ie-2000-4ts-g (environment) · cisco-ie-2000-8t67 (environment) · cisco-ie-2000-8t67p (environment) · cisco-ie-2000-8tc (environment) · cisco-ie-2000-8tc-g (environment) · cisco-ie-2000-8tc-g-e (environment) · cisco-ie-2000-8tc-g-n (environment) · cisco-ie-3000-4tc (environment) · cisco-ie-3000-8tc (environment) · cisco-ie-3010-16s-8pc (environment) · cisco-ie-3010-24tc (environment)
80%
All versions
80%
All versions
80%
All versions
80%
All versions
80%
All versions
80%
All versions
80%
All versions
80%
All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (6)
VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/103569VDB Entryx_refsource_SECTRACKThird Party Advisory
Source: [email protected]
http://www.securitytracker.com/id/1040596x_refsource_MISCThird Party AdvisoryUS Government Resource
Source: [email protected]
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04x_refsource_MISCThird Party AdvisoryUS Government Resource
Source: [email protected]
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smiUS Government Resource
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0156SSVC — Action Prioritization
SSVCActiveAutomatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
7.5HIGHCISA-ADP
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- NONE
- Integrity
- NONE
- Availability
- HIGH
Vector?
Quick Info
StatusANALYZED
CWE
CWE-399CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card