Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-0156

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted packet to an affected device on TCP port 4786. Only Smart Install client switches are affected. Cisco devices that are configured as a Smart Install director are not affected by this vulnerability. Cisco Bug IDs: CSCvd40673.

Published

2018-03-28T22:29:00.467

Last Modified

2025-01-27T20:10:26.267

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: NONE
Integrity Impact: NONE
Availability Impact: COMPLETE

Exploitability Score

10.0

Impact Score

6.9

Weaknesses

Type: Secondary
CWE-399
Type: Primary
CWE-20

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	cisco	ios	15.2\(2\)e4	Yes
Operating System	cisco	ios	15.2\(2a\)ja	Yes
Hardware	cisco	catalyst_2960-plus_24lc-l	-	No
Hardware	cisco	catalyst_2960-plus_24lc-s	-	No
Hardware	cisco	catalyst_2960-plus_24pc-l	-	No
Hardware	cisco	catalyst_2960-plus_24pc-s	-	No
Hardware	cisco	catalyst_2960-plus_24tc-l	-	No
Hardware	cisco	catalyst_2960-plus_24tc-s	-	No
Hardware	cisco	catalyst_2960-plus_48pst-l	-	No
Hardware	cisco	catalyst_2960-plus_48pst-s	-	No
Hardware	cisco	catalyst_2960-plus_48tc-l	-	No
Hardware	cisco	catalyst_2960-plus_48tc-s	-	No
Hardware	cisco	catalyst_2960c-12pc-l	-	No
Hardware	cisco	catalyst_2960c-8pc-l	-	No
Hardware	cisco	catalyst_2960c-8tc-l	-	No
Hardware	cisco	catalyst_2960c-8tc-s	-	No
Hardware	cisco	catalyst_2960cg-8tc-l	-	No
Hardware	cisco	catalyst_2960cpd-8pt-l	-	No
Hardware	cisco	catalyst_2960cpd-8tt-l	-	No
Hardware	cisco	catalyst_2960s-24pd-l	-	No
Hardware	cisco	catalyst_2960s-24ps-l	-	No
Hardware	cisco	catalyst_2960s-24td-l	-	No
Hardware	cisco	catalyst_2960s-24ts-l	-	No
Hardware	cisco	catalyst_2960s-24ts-s	-	No
Hardware	cisco	catalyst_2960s-48fpd-l	-	No
Hardware	cisco	catalyst_2960s-48fps-l	-	No
Hardware	cisco	catalyst_2960s-48lpd-l	-	No
Hardware	cisco	catalyst_2960s-48lps-l	-	No
Hardware	cisco	catalyst_2960s-48td-l	-	No
Hardware	cisco	catalyst_2960s-48ts-l	-	No
Hardware	cisco	catalyst_2960s-48ts-s	-	No
Hardware	cisco	catalyst_2960s-f24ps-l	-	No
Hardware	cisco	catalyst_2960s-f24ts-l	-	No
Hardware	cisco	catalyst_2960s-f24ts-s	-	No
Hardware	cisco	catalyst_2960s-f48fps-l	-	No
Hardware	cisco	catalyst_2960s-f48lps-l	-	No
Hardware	cisco	catalyst_2960s-f48ts-l	-	No
Hardware	cisco	catalyst_2960s-f48ts-s	-	No
Hardware	cisco	catalyst_2960x-24pd-l	-	No
Hardware	cisco	catalyst_2960x-24ps-l	-	No
Hardware	cisco	catalyst_2960x-24psq-l_cool	-	No
Hardware	cisco	catalyst_2960x-24td-l	-	No
Hardware	cisco	catalyst_2960x-24ts-l	-	No
Hardware	cisco	catalyst_2960x-24ts-ll	-	No
Hardware	cisco	catalyst_2960x-48fpd-l	-	No
Hardware	cisco	catalyst_2960x-48fps-l	-	No
Hardware	cisco	catalyst_2960x-48lpd-l	-	No
Hardware	cisco	catalyst_2960x-48lps-l	-	No
Hardware	cisco	catalyst_2960x-48td-l	-	No
Hardware	cisco	catalyst_2960x-48ts-l	-	No
Hardware	cisco	catalyst_2960x-48ts-ll	-	No
Hardware	cisco	catalyst_2960xr-24pd-i	-	No
Hardware	cisco	catalyst_2960xr-24ps-i	-	No
Hardware	cisco	catalyst_2960xr-24td-i	-	No
Hardware	cisco	catalyst_2960xr-24ts-i	-	No
Hardware	cisco	catalyst_2960xr-48fpd-i	-	No
Hardware	cisco	catalyst_2960xr-48fps-i	-	No
Hardware	cisco	catalyst_2960xr-48lpd-i	-	No
Hardware	cisco	catalyst_2960xr-48lps-i	-	No
Hardware	cisco	catalyst_2960xr-48td-i	-	No
Hardware	cisco	catalyst_2960xr-48ts-i	-	No
Hardware	cisco	catalyst_3560c-12pc-s	-	No
Hardware	cisco	catalyst_3560c-8pc-s	-	No
Hardware	cisco	catalyst_3560cg-8pc-s	-	No
Hardware	cisco	catalyst_3560cg-8tc-s	-	No
Hardware	cisco	catalyst_3560cpd-8pt-s	-	No
Hardware	cisco	catalyst_3560x-24p-e	-	No
Hardware	cisco	catalyst_3560x-24p-l	-	No
Hardware	cisco	catalyst_3560x-24p-s	-	No
Hardware	cisco	catalyst_3560x-24t-e	-	No
Hardware	cisco	catalyst_3560x-24t-l	-	No
Hardware	cisco	catalyst_3560x-24t-s	-	No
Hardware	cisco	catalyst_3560x-24u-e	-	No
Hardware	cisco	catalyst_3560x-24u-l	-	No
Hardware	cisco	catalyst_3560x-24u-s	-	No
Hardware	cisco	catalyst_3560x-48p-e	-	No
Hardware	cisco	catalyst_3560x-48p-l	-	No
Hardware	cisco	catalyst_3560x-48p-s	-	No
Hardware	cisco	catalyst_3560x-48pf-e	-	No
Hardware	cisco	catalyst_3560x-48pf-l	-	No
Hardware	cisco	catalyst_3560x-48pf-s	-	No
Hardware	cisco	catalyst_3560x-48t-e	-	No
Hardware	cisco	catalyst_3560x-48t-l	-	No
Hardware	cisco	catalyst_3560x-48t-s	-	No
Hardware	cisco	catalyst_3560x-48u-e	-	No
Hardware	cisco	catalyst_3560x-48u-l	-	No
Hardware	cisco	catalyst_3560x-48u-s	-	No
Hardware	cisco	catalyst_3750x-12s-e	-	No
Hardware	cisco	catalyst_3750x-12s-s	-	No
Hardware	cisco	catalyst_3750x-24p-e	-	No
Hardware	cisco	catalyst_3750x-24p-l	-	No
Hardware	cisco	catalyst_3750x-24p-s	-	No
Hardware	cisco	catalyst_3750x-24s-e	-	No
Hardware	cisco	catalyst_3750x-24s-s	-	No
Hardware	cisco	catalyst_3750x-24t-e	-	No
Hardware	cisco	catalyst_3750x-24t-l	-	No
Hardware	cisco	catalyst_3750x-24t-s	-	No
Hardware	cisco	catalyst_3750x-24u-e	-	No
Hardware	cisco	catalyst_3750x-24u-l	-	No
Hardware	cisco	catalyst_3750x-24u-s	-	No
Hardware	cisco	catalyst_3750x-48p-e	-	No
Hardware	cisco	catalyst_3750x-48p-l	-	No
Hardware	cisco	catalyst_3750x-48p-s	-	No
Hardware	cisco	catalyst_3750x-48pf-e	-	No
Hardware	cisco	catalyst_3750x-48pf-l	-	No
Hardware	cisco	catalyst_3750x-48pf-s	-	No
Hardware	cisco	catalyst_3750x-48t-e	-	No
Hardware	cisco	catalyst_3750x-48t-l	-	No
Hardware	cisco	catalyst_3750x-48t-s	-	No
Hardware	cisco	catalyst_3750x-48u-e	-	No
Hardware	cisco	catalyst_3750x-48u-l	-	No
Hardware	cisco	catalyst_3750x-48u-s	-	No
Hardware	cisco	catalyst_4500_supervisor_engine_6-e	-	No
Hardware	cisco	catalyst_4500_supervisor_engine_6l-e	-	No
Hardware	cisco	catalyst_4900m	-	No
Hardware	cisco	catalyst_4948e	-	No
Hardware	cisco	catalyst_4948e-f	-	No
Hardware	cisco	embedded_service_2020_24tc_con	-	No
Hardware	cisco	embedded_service_2020_24tc_con_b	-	No
Hardware	cisco	embedded_service_2020_24tc_ncp	-	No
Hardware	cisco	embedded_service_2020_24tc_ncp_b	-	No
Hardware	cisco	embedded_service_2020_con	-	No
Hardware	cisco	embedded_service_2020_con_b	-	No
Hardware	cisco	embedded_service_2020_ncp	-	No
Hardware	cisco	embedded_service_2020_ncp_b	-	No
Hardware	cisco	ie-3010-16s-8pc	-	No
Hardware	cisco	ie-3010-24tc	-	No
Hardware	cisco	ie_2000-16ptc-g	-	No
Hardware	cisco	ie_2000-16t67	-	No
Hardware	cisco	ie_2000-16t67p	-	No
Hardware	cisco	ie_2000-16tc	-	No
Hardware	cisco	ie_2000-16tc-g	-	No
Hardware	cisco	ie_2000-16tc-g-e	-	No
Hardware	cisco	ie_2000-16tc-g-n	-	No
Hardware	cisco	ie_2000-16tc-g-x	-	No
Hardware	cisco	ie_2000-24t67	-	No
Hardware	cisco	ie_2000-4s-ts-g	-	No
Hardware	cisco	ie_2000-4t	-	No
Hardware	cisco	ie_2000-4t-g	-	No
Hardware	cisco	ie_2000-4ts	-	No
Hardware	cisco	ie_2000-4ts-g	-	No
Hardware	cisco	ie_2000-8t67	-	No
Hardware	cisco	ie_2000-8t67p	-	No
Hardware	cisco	ie_2000-8tc	-	No
Hardware	cisco	ie_2000-8tc-g	-	No
Hardware	cisco	ie_2000-8tc-g-e	-	No
Hardware	cisco	ie_2000-8tc-g-n	-	No
Hardware	cisco	ie_3000-4tc	-	No
Hardware	cisco	ie_3000-8tc	-	No
Operating System	cisco	ios_xe	15.2\(2\)e4	Yes
Operating System	cisco	ios_xe	15.2\(2a\)ja	Yes
Hardware	cisco	catalyst_2960-plus_24lc-l	-	No
Hardware	cisco	catalyst_2960-plus_24lc-s	-	No
Hardware	cisco	catalyst_2960-plus_24pc-l	-	No
Hardware	cisco	catalyst_2960-plus_24pc-s	-	No
Hardware	cisco	catalyst_2960-plus_24tc-l	-	No
Hardware	cisco	catalyst_2960-plus_24tc-s	-	No
Hardware	cisco	catalyst_2960-plus_48pst-l	-	No
Hardware	cisco	catalyst_2960-plus_48pst-s	-	No
Hardware	cisco	catalyst_2960-plus_48tc-l	-	No
Hardware	cisco	catalyst_2960-plus_48tc-s	-	No
Hardware	cisco	catalyst_2960c-12pc-l	-	No
Hardware	cisco	catalyst_2960c-8pc-l	-	No
Hardware	cisco	catalyst_2960c-8tc-l	-	No
Hardware	cisco	catalyst_2960c-8tc-s	-	No
Hardware	cisco	catalyst_2960cg-8tc-l	-	No
Hardware	cisco	catalyst_2960cpd-8pt-l	-	No
Hardware	cisco	catalyst_2960cpd-8tt-l	-	No
Hardware	cisco	catalyst_2960s-24pd-l	-	No
Hardware	cisco	catalyst_2960s-24ps-l	-	No
Hardware	cisco	catalyst_2960s-24td-l	-	No
Hardware	cisco	catalyst_2960s-24ts-l	-	No
Hardware	cisco	catalyst_2960s-24ts-s	-	No
Hardware	cisco	catalyst_2960s-48fpd-l	-	No
Hardware	cisco	catalyst_2960s-48fps-l	-	No
Hardware	cisco	catalyst_2960s-48lpd-l	-	No
Hardware	cisco	catalyst_2960s-48lps-l	-	No
Hardware	cisco	catalyst_2960s-48td-l	-	No
Hardware	cisco	catalyst_2960s-48ts-l	-	No
Hardware	cisco	catalyst_2960s-48ts-s	-	No
Hardware	cisco	catalyst_2960s-f24ps-l	-	No
Hardware	cisco	catalyst_2960s-f24ts-l	-	No
Hardware	cisco	catalyst_2960s-f24ts-s	-	No
Hardware	cisco	catalyst_2960s-f48fps-l	-	No
Hardware	cisco	catalyst_2960s-f48lps-l	-	No
Hardware	cisco	catalyst_2960s-f48ts-l	-	No
Hardware	cisco	catalyst_2960s-f48ts-s	-	No
Hardware	cisco	catalyst_2960x-24pd-l	-	No
Hardware	cisco	catalyst_2960x-24ps-l	-	No
Hardware	cisco	catalyst_2960x-24psq-l_cool	-	No
Hardware	cisco	catalyst_2960x-24td-l	-	No
Hardware	cisco	catalyst_2960x-24ts-l	-	No
Hardware	cisco	catalyst_2960x-24ts-ll	-	No
Hardware	cisco	catalyst_2960x-48fpd-l	-	No
Hardware	cisco	catalyst_2960x-48fps-l	-	No
Hardware	cisco	catalyst_2960x-48lpd-l	-	No
Hardware	cisco	catalyst_2960x-48lps-l	-	No
Hardware	cisco	catalyst_2960x-48td-l	-	No
Hardware	cisco	catalyst_2960x-48ts-l	-	No
Hardware	cisco	catalyst_2960x-48ts-ll	-	No
Hardware	cisco	catalyst_2960xr-24pd-i	-	No
Hardware	cisco	catalyst_2960xr-24ps-i	-	No
Hardware	cisco	catalyst_2960xr-24td-i	-	No
Hardware	cisco	catalyst_2960xr-24ts-i	-	No
Hardware	cisco	catalyst_2960xr-48fpd-i	-	No
Hardware	cisco	catalyst_2960xr-48fps-i	-	No
Hardware	cisco	catalyst_2960xr-48lpd-i	-	No
Hardware	cisco	catalyst_2960xr-48lps-i	-	No
Hardware	cisco	catalyst_2960xr-48td-i	-	No
Hardware	cisco	catalyst_2960xr-48ts-i	-	No
Hardware	cisco	catalyst_3560c-12pc-s	-	No
Hardware	cisco	catalyst_3560c-8pc-s	-	No
Hardware	cisco	catalyst_3560cg-8pc-s	-	No
Hardware	cisco	catalyst_3560cg-8tc-s	-	No
Hardware	cisco	catalyst_3560cpd-8pt-s	-	No
Hardware	cisco	catalyst_3560x-24p-e	-	No
Hardware	cisco	catalyst_3560x-24p-l	-	No
Hardware	cisco	catalyst_3560x-24p-s	-	No
Hardware	cisco	catalyst_3560x-24t-e	-	No
Hardware	cisco	catalyst_3560x-24t-l	-	No
Hardware	cisco	catalyst_3560x-24t-s	-	No
Hardware	cisco	catalyst_3560x-24u-e	-	No
Hardware	cisco	catalyst_3560x-24u-l	-	No
Hardware	cisco	catalyst_3560x-24u-s	-	No
Hardware	cisco	catalyst_3560x-48p-e	-	No
Hardware	cisco	catalyst_3560x-48p-l	-	No
Hardware	cisco	catalyst_3560x-48p-s	-	No
Hardware	cisco	catalyst_3560x-48pf-e	-	No
Hardware	cisco	catalyst_3560x-48pf-l	-	No
Hardware	cisco	catalyst_3560x-48pf-s	-	No
Hardware	cisco	catalyst_3560x-48t-e	-	No
Hardware	cisco	catalyst_3560x-48t-l	-	No
Hardware	cisco	catalyst_3560x-48t-s	-	No
Hardware	cisco	catalyst_3560x-48u-e	-	No
Hardware	cisco	catalyst_3560x-48u-l	-	No
Hardware	cisco	catalyst_3560x-48u-s	-	No
Hardware	cisco	catalyst_3750x-12s-e	-	No
Hardware	cisco	catalyst_3750x-12s-s	-	No
Hardware	cisco	catalyst_3750x-24p-e	-	No
Hardware	cisco	catalyst_3750x-24p-l	-	No
Hardware	cisco	catalyst_3750x-24p-s	-	No
Hardware	cisco	catalyst_3750x-24s-e	-	No
Hardware	cisco	catalyst_3750x-24s-s	-	No
Hardware	cisco	catalyst_3750x-24t-e	-	No
Hardware	cisco	catalyst_3750x-24t-l	-	No
Hardware	cisco	catalyst_3750x-24t-s	-	No
Hardware	cisco	catalyst_3750x-24u-e	-	No
Hardware	cisco	catalyst_3750x-24u-l	-	No
Hardware	cisco	catalyst_3750x-24u-s	-	No
Hardware	cisco	catalyst_3750x-48p-e	-	No
Hardware	cisco	catalyst_3750x-48p-l	-	No
Hardware	cisco	catalyst_3750x-48p-s	-	No
Hardware	cisco	catalyst_3750x-48pf-e	-	No
Hardware	cisco	catalyst_3750x-48pf-l	-	No
Hardware	cisco	catalyst_3750x-48pf-s	-	No
Hardware	cisco	catalyst_3750x-48t-e	-	No
Hardware	cisco	catalyst_3750x-48t-l	-	No
Hardware	cisco	catalyst_3750x-48t-s	-	No
Hardware	cisco	catalyst_3750x-48u-e	-	No
Hardware	cisco	catalyst_3750x-48u-l	-	No
Hardware	cisco	catalyst_3750x-48u-s	-	No
Hardware	cisco	catalyst_4500_supervisor_engine_6-e	-	No
Hardware	cisco	catalyst_4500_supervisor_engine_6l-e	-	No
Hardware	cisco	catalyst_4900m	-	No
Hardware	cisco	catalyst_4948e	-	No
Hardware	cisco	catalyst_4948e-f	-	No
Hardware	cisco	embedded_service_2020_24tc_con	-	No
Hardware	cisco	embedded_service_2020_24tc_con_b	-	No
Hardware	cisco	embedded_service_2020_24tc_ncp	-	No
Hardware	cisco	embedded_service_2020_24tc_ncp_b	-	No
Hardware	cisco	embedded_service_2020_con	-	No
Hardware	cisco	embedded_service_2020_con_b	-	No
Hardware	cisco	embedded_service_2020_ncp	-	No
Hardware	cisco	embedded_service_2020_ncp_b	-	No
Hardware	cisco	ie-3010-16s-8pc	-	No
Hardware	cisco	ie-3010-24tc	-	No
Hardware	cisco	ie_2000-16ptc-g	-	No
Hardware	cisco	ie_2000-16t67	-	No
Hardware	cisco	ie_2000-16t67p	-	No
Hardware	cisco	ie_2000-16tc	-	No
Hardware	cisco	ie_2000-16tc-g	-	No
Hardware	cisco	ie_2000-16tc-g-e	-	No
Hardware	cisco	ie_2000-16tc-g-n	-	No
Hardware	cisco	ie_2000-16tc-g-x	-	No
Hardware	cisco	ie_2000-24t67	-	No
Hardware	cisco	ie_2000-4s-ts-g	-	No
Hardware	cisco	ie_2000-4t	-	No
Hardware	cisco	ie_2000-4t-g	-	No
Hardware	cisco	ie_2000-4ts	-	No
Hardware	cisco	ie_2000-4ts-g	-	No
Hardware	cisco	ie_2000-8t67	-	No
Hardware	cisco	ie_2000-8t67p	-	No
Hardware	cisco	ie_2000-8tc	-	No
Hardware	cisco	ie_2000-8tc-g	-	No
Hardware	cisco	ie_2000-8tc-g-e	-	No
Hardware	cisco	ie_2000-8tc-g-n	-	No
Hardware	cisco	ie_3000-4tc	-	No
Hardware	cisco	ie_3000-8tc	-	No

References

http://www.securityfocus.com/bid/103569 Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id/1040596 Third Party Advisory, VDB Entry ([email protected])
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04 Third Party Advisory, US Government Resource ([email protected])
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05 Third Party Advisory, US Government Resource ([email protected])
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/103569 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1040596 Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)