{"cve_id":"CVE-2018-0156","published":"2018-03-28T22:29:00.467000+00:00","last_modified":"2026-06-17T01:29:57.570000+00:00","vuln_status":"Analyzed","description":"A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted packet to an affected device on TCP port 4786. Only Smart Install client switches are affected. Cisco devices that are configured as a Smart Install director are not affected by this vulnerability. Cisco Bug IDs: CSCvd40673.","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","base_score":7.5,"base_severity":"HIGH","attack_vector":"NETWORK","privileges_req":"NONE","user_interaction":"NONE","scope":"UNCHANGED","impact_c":"NONE","impact_i":"NONE","impact_a":"HIGH","cwe_ids":["CWE-399","CWE-20"],"in_kev":true,"kev_date_added":"2022-03-03","kev_ransomware":false,"epss_score":0.0936,"epss_percentile":0.95392,"cap_rule_version":"0.1.1","stage":"IMPACT","req_access":"NONE","req_vector":"NETWORK","req_user_interaction":false,"grant_access":"NONE","caps":["DOS"],"terminal":true,"cap_confidence":"high","ingested_at":"2026-09-18T08:44:33.370396+00:00","first_seen":"2018-03-28T22:29:00.467000+00:00","kev_first_seen":"2022-03-03T00:00:00+00:00","novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["cisco"],"products":["catalyst_2960-plus_24lc-l","catalyst_2960-plus_24lc-s","catalyst_2960-plus_24pc-l","catalyst_2960-plus_24pc-s","catalyst_2960-plus_24tc-l","catalyst_2960-plus_24tc-s","catalyst_2960-plus_48pst-l","catalyst_2960-plus_48pst-s","catalyst_2960-plus_48tc-l","catalyst_2960-plus_48tc-s","catalyst_2960c-12pc-l","catalyst_2960c-8pc-l","catalyst_2960c-8tc-l","catalyst_2960c-8tc-s","catalyst_2960cg-8tc-l","catalyst_2960cpd-8pt-l","catalyst_2960cpd-8tt-l","catalyst_2960s-24pd-l","catalyst_2960s-24ps-l","catalyst_2960s-24td-l","catalyst_2960s-24ts-l","catalyst_2960s-24ts-s","catalyst_2960s-48fpd-l","catalyst_2960s-48fps-l","catalyst_2960s-48lpd-l","catalyst_2960s-48lps-l","catalyst_2960s-48td-l","catalyst_2960s-48ts-l","catalyst_2960s-48ts-s","catalyst_2960s-f24ps-l","catalyst_2960s-f24ts-l","catalyst_2960s-f24ts-s","catalyst_2960s-f48fps-l","catalyst_2960s-f48lps-l","catalyst_2960s-f48ts-l","catalyst_2960s-f48ts-s","catalyst_2960x-24pd-l","catalyst_2960x-24ps-l","catalyst_2960x-24psq-l_cool","catalyst_2960x-24td-l","catalyst_2960x-24ts-l","catalyst_2960x-24ts-ll","catalyst_2960x-48fpd-l","catalyst_2960x-48fps-l","catalyst_2960x-48lpd-l","catalyst_2960x-48lps-l","catalyst_2960x-48td-l","catalyst_2960x-48ts-l","catalyst_2960x-48ts-ll","catalyst_2960xr-24pd-i","catalyst_2960xr-24ps-i","catalyst_2960xr-24td-i","catalyst_2960xr-24ts-i","catalyst_2960xr-48fpd-i","catalyst_2960xr-48fps-i","catalyst_2960xr-48lpd-i","catalyst_2960xr-48lps-i","catalyst_2960xr-48td-i","catalyst_2960xr-48ts-i","catalyst_3560c-12pc-s","catalyst_3560c-8pc-s","catalyst_3560cg-8pc-s","catalyst_3560cg-8tc-s","catalyst_3560cpd-8pt-s","catalyst_3560x-24p-e","catalyst_3560x-24p-l","catalyst_3560x-24p-s","catalyst_3560x-24t-e","catalyst_3560x-24t-l","catalyst_3560x-24t-s","catalyst_3560x-24u-e","catalyst_3560x-24u-l","catalyst_3560x-24u-s","catalyst_3560x-48p-e","catalyst_3560x-48p-l","catalyst_3560x-48p-s","catalyst_3560x-48pf-e","catalyst_3560x-48pf-l","catalyst_3560x-48pf-s","catalyst_3560x-48t-e","catalyst_3560x-48t-l","catalyst_3560x-48t-s","catalyst_3560x-48u-e","catalyst_3560x-48u-l","catalyst_3560x-48u-s","catalyst_3750x-12s-e","catalyst_3750x-12s-s","catalyst_3750x-24p-e","catalyst_3750x-24p-l","catalyst_3750x-24p-s","catalyst_3750x-24s-e","catalyst_3750x-24s-s","catalyst_3750x-24t-e","catalyst_3750x-24t-l","catalyst_3750x-24t-s","catalyst_3750x-24u-e","catalyst_3750x-24u-l","catalyst_3750x-24u-s","catalyst_3750x-48p-e","catalyst_3750x-48p-l","catalyst_3750x-48p-s","catalyst_3750x-48pf-e","catalyst_3750x-48pf-l","catalyst_3750x-48pf-s","catalyst_3750x-48t-e","catalyst_3750x-48t-l","catalyst_3750x-48t-s","catalyst_3750x-48u-e","catalyst_3750x-48u-l","catalyst_3750x-48u-s","catalyst_4500_supervisor_engine_6-e","catalyst_4500_supervisor_engine_6l-e","catalyst_4900m","catalyst_4948e","catalyst_4948e-f","embedded_service_2020_24tc_con","embedded_service_2020_24tc_con_b","embedded_service_2020_24tc_ncp","embedded_service_2020_24tc_ncp_b","embedded_service_2020_con","embedded_service_2020_con_b","embedded_service_2020_ncp","embedded_service_2020_ncp_b","ie-3010-16s-8pc","ie-3010-24tc","ie_2000-16ptc-g","ie_2000-16t67","ie_2000-16t67p","ie_2000-16tc","ie_2000-16tc-g","ie_2000-16tc-g-e","ie_2000-16tc-g-n","ie_2000-16tc-g-x","ie_2000-24t67","ie_2000-4s-ts-g","ie_2000-4t","ie_2000-4t-g","ie_2000-4ts","ie_2000-4ts-g","ie_2000-8t67","ie_2000-8t67p","ie_2000-8tc","ie_2000-8tc-g","ie_2000-8tc-g-e","ie_2000-8tc-g-n","ie_3000-4tc","ie_3000-8tc","ios","ios_xe"],"affected":[{"vendor":"cisco","product":"ios","ranges":["15.2\\(2\\)e4","15.2\\(2a\\)ja"]},{"vendor":"cisco","product":"ios_xe","ranges":["15.2\\(2\\)e4","15.2\\(2a\\)ja"]}]}