Vulnerability Details : CVE-2018-0156

A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted packet to an affected device on TCP port 4786. Only Smart Install client switches are affected. Cisco devices that are configured as a Smart Install director are not affected by this vulnerability. Cisco Bug IDs: CSCvd40673.
Publish Date : 2018-03-28 Last Update Date : 2019-10-09

Collapse All Expand All Select Select&Copy	Scroll To Vendor Statements(0) Additional Vendor Data(0) OVAL Definitions(0) Vulnerable Products(0) # Of Vulns By Products References(0) Metasploit Modules(0)	Comments View User Comments Add Comment	External Links Secunia Advisories XForce Advisories Vulnerability Details at NVD Vulnerability Details at Mitre Nessus Plugins Linux Kernel Git Repository First CVSS Guide
Search Twitter Search YouTube Search Google

- CVSS Scores & Vulnerability Types

CVSS Score	7.8
Confidentiality Impact	None (There is no impact to the confidentiality of the system.)
Integrity Impact	None (There is no impact to the integrity of the system)
Availability Impact	Complete (There is a total shutdown of the affected resource. The attacker can render the resource completely unavailable.)
Access Complexity	Low (Specialized access conditions or extenuating circumstances do not exist. Very little knowledge or skill is required to exploit. )
Authentication	Not required (Authentication is not required to exploit the vulnerability.)
Gained Access	None
Vulnerability Type(s)	Denial Of Service
CWE ID	20

- Products Affected By CVE-2018-0156

#	Product Type	Vendor	Product	Version
1	OS	Cisco	IOS	15.2(2)e4	Version Details Vulnerabilities
2	OS	Cisco	IOS	15.2(2a)ja	Version Details Vulnerabilities
3	OS	Cisco	Ios Xe	15.2(2)e4	Version Details Vulnerabilities
4	OS	Cisco	Ios Xe	15.2(2a)ja	Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor	Product	Vulnerable Versions
Cisco	IOS	2
Cisco	Ios Xe	2

- References For CVE-2018-0156

https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi CONFIRM

http://www.securitytracker.com/id/1040596
SECTRACK 1040596

https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04

http://www.securityfocus.com/bid/103569
BID 103569 Cisco IOS and IOS XE Software CVE-2018-0156 Denial of Service Vulnerability Release Date:2018-03-28

- Vulnerability Conditions

Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Cisco IOS 15.2(2a)ja Cisco IOS 15.2(2)e4	Cisco Catalyst 2960-plus 24lc-l Cisco Catalyst 2960-plus 24lc-s Cisco Catalyst 2960-plus 24pc-l Cisco Catalyst 2960-plus 24pc-s Cisco Catalyst 2960-plus 24tc-l Cisco Catalyst 2960-plus 24tc-s Cisco Catalyst 2960-plus 48pst-l Cisco Catalyst 2960-plus 48pst-s Cisco Catalyst 2960-plus 48tc-l Cisco Catalyst 2960-plus 48tc-s Cisco Catalyst 2960c-12pc-l Cisco Catalyst 2960c-8pc-l Cisco Catalyst 2960c-8tc-l Cisco Catalyst 2960c-8tc-s Cisco Catalyst 2960cg-8tc-l Cisco Catalyst 2960cpd-8pt-l Cisco Catalyst 2960cpd-8tt-l Cisco Catalyst 2960s-24pd-l Cisco Catalyst 2960s-24ps-l Cisco Catalyst 2960s-24td-l Cisco Catalyst 2960s-24ts-l Cisco Catalyst 2960s-24ts-s Cisco Catalyst 2960s-48fpd-l Cisco Catalyst 2960s-48fps-l Cisco Catalyst 2960s-48lpd-l Cisco Catalyst 2960s-48lps-l Cisco Catalyst 2960s-48td-l Cisco Catalyst 2960s-48ts-l Cisco Catalyst 2960s-48ts-s Cisco Catalyst 2960s-f24ps-l Cisco Catalyst 2960s-f24ts-l Cisco Catalyst 2960s-f24ts-s Cisco Catalyst 2960s-f48fps-l Cisco Catalyst 2960s-f48lps-l Cisco Catalyst 2960s-f48ts-l Cisco Catalyst 2960s-f48ts-s Cisco Catalyst 2960x-24pd-l Cisco Catalyst 2960x-24ps-l Cisco Catalyst 2960x-24psq-l Cool Cisco Catalyst 2960x-24td-l Cisco Catalyst 2960x-24ts-l Cisco Catalyst 2960x-24ts-ll Cisco Catalyst 2960x-48fpd-l Cisco Catalyst 2960x-48fps-l Cisco Catalyst 2960x-48lpd-l Cisco Catalyst 2960x-48lps-l Cisco Catalyst 2960x-48td-l Cisco Catalyst 2960x-48ts-l Cisco Catalyst 2960x-48ts-ll Cisco Catalyst 2960xr-24pd-i Cisco Catalyst 2960xr-24ps-i Cisco Catalyst 2960xr-24td-i Cisco Catalyst 2960xr-24ts-i Cisco Catalyst 2960xr-48fpd-i Cisco Catalyst 2960xr-48fps-i Cisco Catalyst 2960xr-48lpd-i Cisco Catalyst 2960xr-48lps-i Cisco Catalyst 2960xr-48td-i Cisco Catalyst 2960xr-48ts-i Cisco Catalyst 3560c-12pc-s Cisco Catalyst 3560c-8pc-s Cisco Catalyst 3560cg-8pc-s Cisco Catalyst 3560cg-8tc-s Cisco Catalyst 3560cpd-8pt-s Cisco Catalyst 3560x-24p-e Cisco Catalyst 3560x-24p-l Cisco Catalyst 3560x-24p-s Cisco Catalyst 3560x-24t-e Cisco Catalyst 3560x-24t-l Cisco Catalyst 3560x-24t-s Cisco Catalyst 3560x-24u-e Cisco Catalyst 3560x-24u-l Cisco Catalyst 3560x-24u-s Cisco Catalyst 3560x-48p-e Cisco Catalyst 3560x-48p-l Cisco Catalyst 3560x-48p-s Cisco Catalyst 3560x-48pf-e Cisco Catalyst 3560x-48pf-l Cisco Catalyst 3560x-48pf-s Cisco Catalyst 3560x-48t-e Cisco Catalyst 3560x-48t-l Cisco Catalyst 3560x-48t-s Cisco Catalyst 3560x-48u-e Cisco Catalyst 3560x-48u-l Cisco Catalyst 3560x-48u-s Cisco Catalyst 3750x-12s-e Cisco Catalyst 3750x-12s-s Cisco Catalyst 3750x-24p-e Cisco Catalyst 3750x-24p-l Cisco Catalyst 3750x-24p-s Cisco Catalyst 3750x-24s-e Cisco Catalyst 3750x-24s-s Cisco Catalyst 3750x-24t-e Cisco Catalyst 3750x-24t-l Cisco Catalyst 3750x-24t-s Cisco Catalyst 3750x-24u-e Cisco Catalyst 3750x-24u-l Cisco Catalyst 3750x-24u-s Cisco Catalyst 3750x-48p-e Cisco Catalyst 3750x-48p-l Cisco Catalyst 3750x-48p-s Cisco Catalyst 3750x-48pf-e Cisco Catalyst 3750x-48pf-l Cisco Catalyst 3750x-48pf-s Cisco Catalyst 3750x-48t-e Cisco Catalyst 3750x-48t-l Cisco Catalyst 3750x-48t-s Cisco Catalyst 3750x-48u-e Cisco Catalyst 3750x-48u-l Cisco Catalyst 3750x-48u-s Cisco Catalyst 4500 Supervisor Engine 6-e Cisco Catalyst 4500 Supervisor Engine 6l-e Cisco Catalyst 4900m Cisco Catalyst 4948e Cisco Catalyst 4948e-f Cisco Embedded Service 2020 24tc Con Cisco Embedded Service 2020 24tc Con B Cisco Embedded Service 2020 24tc Ncp Cisco Embedded Service 2020 24tc Ncp B Cisco Embedded Service 2020 Con Cisco Embedded Service 2020 Con B Cisco Embedded Service 2020 Ncp Cisco Embedded Service 2020 Ncp B Cisco Ie 2000-16ptc-g Cisco Ie 2000-16t67 Cisco Ie 2000-16t67p Cisco Ie 2000-16tc Cisco Ie 2000-16tc-g Cisco Ie 2000-16tc-g-e Cisco Ie 2000-16tc-g-n Cisco Ie 2000-16tc-g-x Cisco Ie 2000-24t67 Cisco Ie 2000-4s-ts-g Cisco Ie 2000-4t Cisco Ie 2000-4t-g Cisco Ie 2000-4ts Cisco Ie 2000-4ts-g Cisco Ie 2000-8t67 Cisco Ie 2000-8t67p Cisco Ie 2000-8tc Cisco Ie 2000-8tc-g Cisco Ie 2000-8tc-g-e Cisco Ie 2000-8tc-g-n Cisco Ie 3000-4tc Cisco Ie 3000-8tc Cisco Ie-3010-16s-8pc Cisco Ie-3010-24tc
Vulnerability is valid if product versions listed below are used TOGETHER WITH(AND)
Cisco Ios Xe 15.2(2a)ja Cisco Ios Xe 15.2(2)e4	Cisco Catalyst 2960-plus 24lc-l Cisco Catalyst 2960-plus 24lc-s Cisco Catalyst 2960-plus 24pc-l Cisco Catalyst 2960-plus 24pc-s Cisco Catalyst 2960-plus 24tc-l Cisco Catalyst 2960-plus 24tc-s Cisco Catalyst 2960-plus 48pst-l Cisco Catalyst 2960-plus 48pst-s Cisco Catalyst 2960-plus 48tc-l Cisco Catalyst 2960-plus 48tc-s Cisco Catalyst 2960c-12pc-l Cisco Catalyst 2960c-8pc-l Cisco Catalyst 2960c-8tc-l Cisco Catalyst 2960c-8tc-s Cisco Catalyst 2960cg-8tc-l Cisco Catalyst 2960cpd-8pt-l Cisco Catalyst 2960cpd-8tt-l Cisco Catalyst 2960s-24pd-l Cisco Catalyst 2960s-24ps-l Cisco Catalyst 2960s-24td-l Cisco Catalyst 2960s-24ts-l Cisco Catalyst 2960s-24ts-s Cisco Catalyst 2960s-48fpd-l Cisco Catalyst 2960s-48fps-l Cisco Catalyst 2960s-48lpd-l Cisco Catalyst 2960s-48lps-l Cisco Catalyst 2960s-48td-l Cisco Catalyst 2960s-48ts-l Cisco Catalyst 2960s-48ts-s Cisco Catalyst 2960s-f24ps-l Cisco Catalyst 2960s-f24ts-l Cisco Catalyst 2960s-f24ts-s Cisco Catalyst 2960s-f48fps-l Cisco Catalyst 2960s-f48lps-l Cisco Catalyst 2960s-f48ts-l Cisco Catalyst 2960s-f48ts-s Cisco Catalyst 2960x-24pd-l Cisco Catalyst 2960x-24ps-l Cisco Catalyst 2960x-24psq-l Cool Cisco Catalyst 2960x-24td-l Cisco Catalyst 2960x-24ts-l Cisco Catalyst 2960x-24ts-ll Cisco Catalyst 2960x-48fpd-l Cisco Catalyst 2960x-48fps-l Cisco Catalyst 2960x-48lpd-l Cisco Catalyst 2960x-48lps-l Cisco Catalyst 2960x-48td-l Cisco Catalyst 2960x-48ts-l Cisco Catalyst 2960x-48ts-ll Cisco Catalyst 2960xr-24pd-i Cisco Catalyst 2960xr-24ps-i Cisco Catalyst 2960xr-24td-i Cisco Catalyst 2960xr-24ts-i Cisco Catalyst 2960xr-48fpd-i Cisco Catalyst 2960xr-48fps-i Cisco Catalyst 2960xr-48lpd-i Cisco Catalyst 2960xr-48lps-i Cisco Catalyst 2960xr-48td-i Cisco Catalyst 2960xr-48ts-i Cisco Catalyst 3560c-12pc-s Cisco Catalyst 3560c-8pc-s Cisco Catalyst 3560cg-8pc-s Cisco Catalyst 3560cg-8tc-s Cisco Catalyst 3560cpd-8pt-s Cisco Catalyst 3560x-24p-e Cisco Catalyst 3560x-24p-l Cisco Catalyst 3560x-24p-s Cisco Catalyst 3560x-24t-e Cisco Catalyst 3560x-24t-l Cisco Catalyst 3560x-24t-s Cisco Catalyst 3560x-24u-e Cisco Catalyst 3560x-24u-l Cisco Catalyst 3560x-24u-s Cisco Catalyst 3560x-48p-e Cisco Catalyst 3560x-48p-l Cisco Catalyst 3560x-48p-s Cisco Catalyst 3560x-48pf-e Cisco Catalyst 3560x-48pf-l Cisco Catalyst 3560x-48pf-s Cisco Catalyst 3560x-48t-e Cisco Catalyst 3560x-48t-l Cisco Catalyst 3560x-48t-s Cisco Catalyst 3560x-48u-e Cisco Catalyst 3560x-48u-l Cisco Catalyst 3560x-48u-s Cisco Catalyst 3750x-12s-e Cisco Catalyst 3750x-12s-s Cisco Catalyst 3750x-24p-e Cisco Catalyst 3750x-24p-l Cisco Catalyst 3750x-24p-s Cisco Catalyst 3750x-24s-e Cisco Catalyst 3750x-24s-s Cisco Catalyst 3750x-24t-e Cisco Catalyst 3750x-24t-l Cisco Catalyst 3750x-24t-s Cisco Catalyst 3750x-24u-e Cisco Catalyst 3750x-24u-l Cisco Catalyst 3750x-24u-s Cisco Catalyst 3750x-48p-e Cisco Catalyst 3750x-48p-l Cisco Catalyst 3750x-48p-s Cisco Catalyst 3750x-48pf-e Cisco Catalyst 3750x-48pf-l Cisco Catalyst 3750x-48pf-s Cisco Catalyst 3750x-48t-e Cisco Catalyst 3750x-48t-l Cisco Catalyst 3750x-48t-s Cisco Catalyst 3750x-48u-e Cisco Catalyst 3750x-48u-l Cisco Catalyst 3750x-48u-s Cisco Catalyst 4500 Supervisor Engine 6-e Cisco Catalyst 4500 Supervisor Engine 6l-e Cisco Catalyst 4900m Cisco Catalyst 4948e Cisco Catalyst 4948e-f Cisco Embedded Service 2020 24tc Con Cisco Embedded Service 2020 24tc Con B Cisco Embedded Service 2020 24tc Ncp Cisco Embedded Service 2020 24tc Ncp B Cisco Embedded Service 2020 Con Cisco Embedded Service 2020 Con B Cisco Embedded Service 2020 Ncp Cisco Embedded Service 2020 Ncp B Cisco Ie 2000-16ptc-g Cisco Ie 2000-16t67 Cisco Ie 2000-16t67p Cisco Ie 2000-16tc Cisco Ie 2000-16tc-g Cisco Ie 2000-16tc-g-e Cisco Ie 2000-16tc-g-n Cisco Ie 2000-16tc-g-x Cisco Ie 2000-24t67 Cisco Ie 2000-4s-ts-g Cisco Ie 2000-4t Cisco Ie 2000-4t-g Cisco Ie 2000-4ts Cisco Ie 2000-4ts-g Cisco Ie 2000-8t67 Cisco Ie 2000-8t67p Cisco Ie 2000-8tc Cisco Ie 2000-8tc-g Cisco Ie 2000-8tc-g-e Cisco Ie 2000-8tc-g-n Cisco Ie 3000-4tc Cisco Ie 3000-8tc Cisco Ie-3010-16s-8pc Cisco Ie-3010-24tc

- Metasploit Modules Related To CVE-2018-0156

There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)