CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-03-28
Cisco IOS and IOS XE Smart Install Remote Denial of Service Vulnerability (CVE-2018-0156)
[Affected Scope] Cisco switches running Cisco IOS or IOS XE Software with the Smart Install client feature enabled
[Impact] Unauthenticated, remote attackers can trigger an unexpected device reload, leading to a persistent Denial of Service (DoS) condition
[Mitigation] Disable the Smart Install feature using the 'no vstack' command, or restrict access to TCP port 4786 using infrastructure ACLs