CVE-2018-0171

Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability

Description

Cisco IOS and IOS XE Software improperly validates packet data, allowing an unauthenticated, remote attacker to trigger a reload of an affected device, cause a denial-of-service (DoS) condition, or perform code execution on the affected device.

Severity: CRITICAL

CVSS Score: 9.8

Vendor: Cisco

Product: IOS and IOS XE