coldbraid

CVE-2018-0171 Cisco IOS And IOS XE

Cisco IOS and IOS XE Software improperly validates packet data, allowing an unauthenticated, remote attacker to trigger a reload of an affected device, cause a denial-of-service (DoS) condition, or perform code execution on the affected device.

CVSS
not scored

CWE-20

On CISA’s exploited list

Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
not known

Actors known to use it (MITRE ATT&CK)