Severity
High
Analysis Summary
CVE-2018-0171
Cisco IOS and Cisco IOS XE are vulnerable to a buffer overflow, caused by improper bounds checking by the Smart Install feature. By sending a specially crafted Smart Install message to an affected device on TCP port 4786, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
Impact
- Buffer Overflow
Indicators Of Compromise
CVE
- CVE-2018-0171
Affected Vendors
Cisco
Affected Products
- Cisco IOS 12.2
- Cisco IOS XE 16.1.1
Remediation
Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information.

