{
  "affected": [],
  "aliases": [
    "CVE-2018-0171"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20",
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2018-03-28T22:29:00Z",
    "severity": "CRITICAL"
  },
  "details": "A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device, which could have the following impacts: Triggering a reload of the device, Allowing the attacker to execute arbitrary code on the device, Causing an indefinite loop on the affected device that triggers a watchdog crash. Cisco Bug IDs: CSCvg76186.",
  "id": "GHSA-4w6g-87mh-x63x",
  "modified": "2025-10-22T00:31:30Z",
  "published": "2022-05-13T01:17:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0171"
    },
    {
      "type": "WEB",
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04"
    },
    {
      "type": "WEB",
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05"
    },
    {
      "type": "WEB",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"
    },
    {
      "type": "WEB",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0171"
    },
    {
      "type": "WEB",
      "url": "https://www.darkreading.com/perimeter/attackers-exploit-cisco-switch-issue-as-vendor-warns-of-yet-another-critical-flaw/d/d-id/1331490"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/103538"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1040580"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2018-0171",
    "description": "A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device, which could have the following impacts: Triggering a reload of the device, Allowing the attacker to execute arbitrary code on the device, Causing an indefinite loop on the affected device that triggers a watchdog crash. Cisco Bug IDs: CSCvg76186.",
    "id": "GSD-2018-0171"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2018-0171"
      ],
      "details": "A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device, which could have the following impacts: Triggering a reload of the device, Allowing the attacker to execute arbitrary code on the device, Causing an indefinite loop on the affected device that triggers a watchdog crash. Cisco Bug IDs: CSCvg76186.",
      "id": "GSD-2018-0171",
      "modified": "2023-12-13T01:22:24.481270Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cisa.gov": {
      "cveID": "CVE-2018-0171",
      "dateAdded": "2021-11-03",
      "dueDate": "2022-05-03",
      "product": "IOS and IOS XE",
      "requiredAction": "Apply updates per vendor instructions.",
      "shortDescription": "A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device, which could have the following impacts: Triggering a reload of the device, Allowing the attacker to execute arbitrary code on the device, Causing an indefinite loop on the affected device that triggers a watchdog crash. Cisco Bug IDs: CSCvg76186.",
      "vendorProject": "Cisco",
      "vulnerabilityName": "Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability"
    },
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "psirt@cisco.com",
        "ID": "CVE-2018-0171",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Cisco IOS and IOS XE",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "Cisco IOS and IOS XE"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device, which could have the following impacts: Triggering a reload of the device, Allowing the attacker to execute arbitrary code on the device, Causing an indefinite loop on the affected device that triggers a watchdog crash. Cisco Bug IDs: CSCvg76186."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-20"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04",
            "refsource": "MISC",
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04"
          },
          {
            "name": "1040580",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1040580"
          },
          {
            "name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2",
            "refsource": "CONFIRM",
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"
          },
          {
            "name": "https://www.darkreading.com/perimeter/attackers-exploit-cisco-switch-issue-as-vendor-warns-of-yet-another-critical-flaw/d/d-id/1331490",
            "refsource": "MISC",
            "url": "https://www.darkreading.com/perimeter/attackers-exploit-cisco-switch-issue-as-vendor-warns-of-yet-another-critical-flaw/d/d-id/1331490"
          },
          {
            "name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05",
            "refsource": "MISC",
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05"
          },
          {
            "name": "103538",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/103538"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:cisco:ios:15.2\\(5\\)e:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2018-0171"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device, which could have the following impacts: Triggering a reload of the device, Allowing the attacker to execute arbitrary code on the device, Causing an indefinite loop on the affected device that triggers a watchdog crash. Cisco Bug IDs: CSCvg76186."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2",
              "refsource": "CONFIRM",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"
            },
            {
              "name": "1040580",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1040580"
            },
            {
              "name": "103538",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/103538"
            },
            {
              "name": "https://www.darkreading.com/perimeter/attackers-exploit-cisco-switch-issue-as-vendor-warns-of-yet-another-critical-flaw/d/d-id/1331490",
              "refsource": "MISC",
              "tags": [
                "Press/Media Coverage"
              ],
              "url": "https://www.darkreading.com/perimeter/attackers-exploit-cisco-switch-issue-as-vendor-warns-of-yet-another-critical-flaw/d/d-id/1331490"
            },
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory",
                "US Government Resource"
              ],
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05"
            },
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04",
              "refsource": "MISC",
              "tags": [
                "Third Party Advisory",
                "US Government Resource"
              ],
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": true,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2020-09-04T18:25Z",
      "publishedDate": "2018-03-28T22:29Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "text": "kritisch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das f\u00fcr Cisco Ger\u00e4te wie z. B. Router und Switches eingesetzt wird.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Cisco IOS und Cisco IOS XE ausnutzen, um Daten zu manipulieren, vertrauliche Daten einzusehen, einen Denial of Service Angriff durchzuf\u00fchren, seine Privilegien zu erweitern, Cross-Site Scripting Angriffe durchzuf\u00fchren, Sicherheitsmechanismen zu umgehen oder beliebigen Code mit administrativen Privilegien zur Ausf\u00fchrung zu bringen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- CISCO Appliance",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-1871 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2018/wid-sec-w-2025-1871.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-1871 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1871"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-webuixss vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-webuixss"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-sisf vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-sisf"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-cmdinj vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-cmdinj"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-FIB-dos vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-FIB-dos"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-igmp vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-igmp"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-wfw vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-wfw"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-qos vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-qos"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-slogin vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-slogin"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-dot1x vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dot1x"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-snmp-dos vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp-dos"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-opendns-dos vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-opendns-dos"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-ike-dos vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike-dos"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-xesc vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-xesc"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-rest vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-rest"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-xepriv vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-xepriv"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-ike vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-dos vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dos"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-privesc3 vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-privesc3"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-privesc2 vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-privesc2"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-privesc1 vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-privesc1"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-dhcpr3 vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-dhcpr2 vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr2"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-dhcpr1 vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr1"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-smi2 vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-smi vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-snmp vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-fwip vom 2018-03-28",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-fwip"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory: cisco-sa-20180409-smi",
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180409-smi"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-20180328-smi2 vom 2025-08-20",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"
      },
      {
        "category": "external",
        "summary": "FBI Alert I-082025-PSA vom 2025-08-20",
        "url": "http://www.ic3.gov/PSA/2025/PSA250820"
      }
    ],
    "source_lang": "en-US",
    "title": "Cisco IOS: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-08-20T22:00:00.000+00:00",
      "generator": {
        "date": "2025-08-21T05:20:23.951+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.4.0"
        }
      },
      "id": "WID-SEC-W-2025-1871",
      "initial_release_date": "2018-03-28T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2018-03-28T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initial Release"
        },
        {
          "date": "2018-03-28T22:00:00.000+00:00",
          "number": "2",
          "summary": "Version nicht vorhanden"
        },
        {
          "date": "2018-04-09T22:00:00.000+00:00",
          "number": "3",
          "summary": "New remediations available"
        },
        {
          "date": "2025-08-20T22:00:00.000+00:00",
          "number": "4",
          "summary": "CVE-2018-0171 wird ausgenutzt"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Cisco IOS",
            "product": {
              "name": "Cisco IOS",
              "product_id": "T001045",
              "product_identification_helper": {
                "cpe": "cpe:/o:cisco:ios:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Cisco IOS XE",
            "product": {
              "name": "Cisco IOS XE",
              "product_id": "T001605",
              "product_identification_helper": {
                "cpe": "cpe:/o:cisco:ios_xe:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-0179",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0179"
    },
    {
      "cve": "CVE-2018-0150",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0150"
    },
    {
      "cve": "CVE-2018-0151",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0151"
    },
    {
      "cve": "CVE-2018-0152",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0152"
    },
    {
      "cve": "CVE-2018-0154",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0154"
    },
    {
      "cve": "CVE-2018-0156",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0156"
    },
    {
      "cve": "CVE-2018-0157",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0157"
    },
    {
      "cve": "CVE-2018-0158",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0158"
    },
    {
      "cve": "CVE-2018-0159",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0159"
    },
    {
      "cve": "CVE-2018-0160",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0160"
    },
    {
      "cve": "CVE-2018-0161",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0161"
    },
    {
      "cve": "CVE-2018-0163",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0163"
    },
    {
      "cve": "CVE-2018-0164",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0164"
    },
    {
      "cve": "CVE-2018-0165",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0165"
    },
    {
      "cve": "CVE-2018-0169",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0169"
    },
    {
      "cve": "CVE-2018-0170",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0170"
    },
    {
      "cve": "CVE-2018-0171",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0171"
    },
    {
      "cve": "CVE-2018-0172",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0172"
    },
    {
      "cve": "CVE-2018-0173",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0173"
    },
    {
      "cve": "CVE-2018-0174",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0174"
    },
    {
      "cve": "CVE-2018-0176",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0176"
    },
    {
      "cve": "CVE-2018-0180",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0180"
    },
    {
      "cve": "CVE-2018-0182",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0182"
    },
    {
      "cve": "CVE-2018-0183",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0183"
    },
    {
      "cve": "CVE-2018-0184",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0184"
    },
    {
      "cve": "CVE-2018-0185",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0185"
    },
    {
      "cve": "CVE-2018-0186",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0186"
    },
    {
      "cve": "CVE-2018-0188",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0188"
    },
    {
      "cve": "CVE-2018-0189",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0189"
    },
    {
      "cve": "CVE-2018-0190",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0190"
    },
    {
      "cve": "CVE-2018-0193",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0193"
    },
    {
      "cve": "CVE-2018-0194",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0194"
    },
    {
      "cve": "CVE-2018-0195",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0195"
    },
    {
      "cve": "CVE-2018-0196",
      "product_status": {
        "known_affected": [
          "T001605",
          "T001045"
        ]
      },
      "release_date": "2018-03-28T22:00:00.000+00:00",
      "title": "CVE-2018-0196"
    }
  ]
}

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201803-1387",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "ios",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "15.2\\(5\\)e"
      },
      {
        "model": "ios",
        "scope": null,
        "trust": 1.4,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios xe",
        "scope": null,
        "trust": 0.6,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "ios xe software",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "0"
      },
      {
        "model": "ios 15.2 e",
        "scope": null,
        "trust": 0.3,
        "vendor": "cisco",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-06774"
      },
      {
        "db": "BID",
        "id": "103538"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-003296"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201803-1022"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-0171"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/o:cisco:ios",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-003296"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The vendor reported this issue.",
    "sources": [
      {
        "db": "BID",
        "id": "103538"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2018-0171",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "CVE-2018-0171",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.9,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "CNVD-2018-06774",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 10.0,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 10.0,
            "id": "VHN-118373",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 3.9,
            "id": "CVE-2018-0171",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          {
            "attackComplexity": "Low",
            "attackVector": "Network",
            "author": "NVD",
            "availabilityImpact": "High",
            "baseScore": 9.8,
            "baseSeverity": "Critical",
            "confidentialityImpact": "High",
            "exploitabilityScore": null,
            "id": "CVE-2018-0171",
            "impactScore": null,
            "integrityImpact": "High",
            "privilegesRequired": "None",
            "scope": "Unchanged",
            "trust": 0.8,
            "userInteraction": "None",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2018-0171",
            "trust": 1.0,
            "value": "CRITICAL"
          },
          {
            "author": "NVD",
            "id": "CVE-2018-0171",
            "trust": 0.8,
            "value": "Critical"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2018-06774",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201803-1022",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "VULHUB",
            "id": "VHN-118373",
            "trust": 0.1,
            "value": "HIGH"
          },
          {
            "author": "VULMON",
            "id": "CVE-2018-0171",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-06774"
      },
      {
        "db": "VULHUB",
        "id": "VHN-118373"
      },
      {
        "db": "VULMON",
        "id": "CVE-2018-0171"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-003296"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201803-1022"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-0171"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device, which could have the following impacts: Triggering a reload of the device, Allowing the attacker to execute arbitrary code on the device, Causing an indefinite loop on the affected device that triggers a watchdog crash. Cisco Bug IDs: CSCvg76186. Cisco IOS Software and Cisco IOS XE The software contains a buffer error vulnerability and an input validation vulnerability. Vendors have confirmed this vulnerability Bug ID CSCvg76186 It is released as.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. As a plug-and-play configuration and image management function, SmartInstall provides zero-configuration deployment for newly-joined switches, auto-initial configuration and operating system image loading, and configuration file backup. \nSuccessfully exploiting this issue may allow remote attackers to execute arbitrary code. Failed attempts will likely result in denial-of-service conditions",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2018-0171"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-003296"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2018-06774"
      },
      {
        "db": "BID",
        "id": "103538"
      },
      {
        "db": "VULHUB",
        "id": "VHN-118373"
      },
      {
        "db": "VULMON",
        "id": "CVE-2018-0171"
      }
    ],
    "trust": 2.61
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-118373",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-118373"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2018-0171",
        "trust": 3.5
      },
      {
        "db": "BID",
        "id": "103538",
        "trust": 2.7
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-18-107-05",
        "trust": 2.6
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-18-107-04",
        "trust": 2.6
      },
      {
        "db": "SECTRACK",
        "id": "1040580",
        "trust": 1.8
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-003296",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201803-1022",
        "trust": 0.7
      },
      {
        "db": "CNVD",
        "id": "CNVD-2018-06774",
        "trust": 0.6
      },
      {
        "db": "EXPLOIT-DB",
        "id": "44451",
        "trust": 0.1
      },
      {
        "db": "SEEBUG",
        "id": "SSVID-97206",
        "trust": 0.1
      },
      {
        "db": "VULHUB",
        "id": "VHN-118373",
        "trust": 0.1
      },
      {
        "db": "VULMON",
        "id": "CVE-2018-0171",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-06774"
      },
      {
        "db": "VULHUB",
        "id": "VHN-118373"
      },
      {
        "db": "VULMON",
        "id": "CVE-2018-0171"
      },
      {
        "db": "BID",
        "id": "103538"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-003296"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201803-1022"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-0171"
      }
    ]
  },
  "id": "VAR-201803-1387",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-06774"
      },
      {
        "db": "VULHUB",
        "id": "VHN-118373"
      }
    ],
    "trust": 1.29181416
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-06774"
      }
    ]
  },
  "last_update_date": "2024-11-23T21:39:32.692000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "cisco-sa-20180328-smi2",
        "trust": 0.8,
        "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"
      },
      {
        "title": "Patch for CiscoSmartInstall Remote Command Execution Vulnerability",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/124979"
      },
      {
        "title": "Cisco: Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts\u0026qid=cisco-sa-20180328-smi2"
      },
      {
        "title": "Cisco: Action Required to Secure the Cisco IOS and IOS XE Smart Install Feature",
        "trust": 0.1,
        "url": "https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts\u0026qid=cisco-sa-20180409-smi"
      },
      {
        "title": "mitigate-cve",
        "trust": 0.1,
        "url": "https://github.com/IPvSean/mitigate-cve "
      },
      {
        "title": "gocarts",
        "trust": 0.1,
        "url": "https://github.com/tomoyamachi/gocarts "
      },
      {
        "title": "Exp101tsArchiv30thers",
        "trust": 0.1,
        "url": "https://github.com/nu11secur1ty/Exp101tsArchiv30thers "
      },
      {
        "title": "awesome-cve-poc_qazbnm456",
        "trust": 0.1,
        "url": "https://github.com/xbl3/awesome-cve-poc_qazbnm456 "
      },
      {
        "title": "BleepingComputer",
        "trust": 0.1,
        "url": "https://www.bleepingcomputer.com/news/security/cisco-asa-flaw-exploited-in-the-wild-after-publication-of-two-pocs/"
      },
      {
        "title": "BleepingComputer",
        "trust": 0.1,
        "url": "https://www.bleepingcomputer.com/news/security/iranian-and-russian-networks-attacked-using-ciscos-cve-2018-0171-vulnerability/"
      },
      {
        "title": "The Register",
        "trust": 0.1,
        "url": "https://www.theregister.co.uk/2018/03/29/cisco_critical_ios_bugs/"
      },
      {
        "title": "Threatpost",
        "trust": 0.1,
        "url": "https://threatpost.com/cisco-patches-two-critical-rce-bugs-in-ios-xe-software/130852/"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-06774"
      },
      {
        "db": "VULMON",
        "id": "CVE-2018-0171"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-003296"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-20",
        "trust": 1.9
      },
      {
        "problemtype": "CWE-787",
        "trust": 1.1
      },
      {
        "problemtype": "CWE-119",
        "trust": 0.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-118373"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-003296"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-0171"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.8,
        "url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20180328-smi2"
      },
      {
        "trust": 2.7,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-18-107-04"
      },
      {
        "trust": 2.6,
        "url": "https://ics-cert.us-cert.gov/advisories/icsa-18-107-05"
      },
      {
        "trust": 1.9,
        "url": "http://www.securityfocus.com/bid/103538"
      },
      {
        "trust": 1.8,
        "url": "https://www.darkreading.com/perimeter/attackers-exploit-cisco-switch-issue-as-vendor-warns-of-yet-another-critical-flaw/d/d-id/1331490"
      },
      {
        "trust": 1.8,
        "url": "http://www.securitytracker.com/id/1040580"
      },
      {
        "trust": 0.8,
        "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-0171"
      },
      {
        "trust": 0.8,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2018-0171"
      },
      {
        "trust": 0.3,
        "url": "http://www.cisco.com/"
      },
      {
        "trust": 0.1,
        "url": "https://cwe.mitre.org/data/definitions/787.html"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov"
      },
      {
        "trust": 0.1,
        "url": "https://github.com/ipvsean/mitigate-cve"
      },
      {
        "trust": 0.1,
        "url": "https://threatpost.com/cisco-patches-two-critical-rce-bugs-in-ios-xe-software/130852/"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-06774"
      },
      {
        "db": "VULHUB",
        "id": "VHN-118373"
      },
      {
        "db": "VULMON",
        "id": "CVE-2018-0171"
      },
      {
        "db": "BID",
        "id": "103538"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-003296"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201803-1022"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-0171"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2018-06774"
      },
      {
        "db": "VULHUB",
        "id": "VHN-118373"
      },
      {
        "db": "VULMON",
        "id": "CVE-2018-0171"
      },
      {
        "db": "BID",
        "id": "103538"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-003296"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201803-1022"
      },
      {
        "db": "NVD",
        "id": "CVE-2018-0171"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2018-03-30T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2018-06774"
      },
      {
        "date": "2018-03-28T00:00:00",
        "db": "VULHUB",
        "id": "VHN-118373"
      },
      {
        "date": "2018-03-28T00:00:00",
        "db": "VULMON",
        "id": "CVE-2018-0171"
      },
      {
        "date": "2018-03-28T00:00:00",
        "db": "BID",
        "id": "103538"
      },
      {
        "date": "2018-05-22T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2018-003296"
      },
      {
        "date": "2018-03-29T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201803-1022"
      },
      {
        "date": "2018-03-28T22:29:01.063000",
        "db": "NVD",
        "id": "CVE-2018-0171"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2018-04-07T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2018-06774"
      },
      {
        "date": "2020-09-04T00:00:00",
        "db": "VULHUB",
        "id": "VHN-118373"
      },
      {
        "date": "2020-09-04T00:00:00",
        "db": "VULMON",
        "id": "CVE-2018-0171"
      },
      {
        "date": "2018-03-28T00:00:00",
        "db": "BID",
        "id": "103538"
      },
      {
        "date": "2018-05-22T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2018-003296"
      },
      {
        "date": "2020-09-07T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201803-1022"
      },
      {
        "date": "2024-11-21T03:37:39.277000",
        "db": "NVD",
        "id": "CVE-2018-0171"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201803-1022"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Cisco IOS Software and  Cisco IOS XE Software buffer error vulnerability",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2018-003296"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "buffer error",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201803-1022"
      }
    ],
    "trust": 0.6
  }
}

{
  "document": {
    "acknowledgments": [
      {
        "summary": "Cisco would like to thank George Nosenko from Embedi for reporting this vulnerability via GeekPwn."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "notes": [
      {
        "category": "summary",
        "text": "Update August 20, 2025: Cisco is aware of continued exploitation activity of the vulnerability that is described in this advisory and strongly recommends that customers assess their systems and upgrade to a fixed software release as soon as possible.\r\n\r\nA vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device.\r\n\r\nThe vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device, which could have the following impacts:\r\n\r\nTriggering a reload of the device\r\nAllowing the attacker to execute arbitrary code on the device\r\nCausing an indefinite loop on the affected device that triggers a watchdog crash\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\nSmart Install client functionality is enabled by default on switches that are running Cisco IOS Software releases that have not been updated to address Cisco bug ID CSCvd36820 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd36820\"].\r\n\r\n\r\n\r\nThis advisory is part of the March 28, 2018, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 20 Cisco Security Advisories that describe 22 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: March 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [\"https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-66682\"].",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "This vulnerability affects Cisco devices that are running a vulnerable release of Cisco IOS or IOS XE Software and have the Smart Install client feature enabled.\r\n\r\nOnly Smart Install client switches are affected by the vulnerability that is described in this advisory. Cisco devices that are configured as a Smart Install director are not affected by this vulnerability.\r\n\r\nFor a list of devices that support Smart Install, see Smart Install Configuration Guide - Supported Devices [\"https://www.cisco.com/c/en/us/td/docs/switches/lan/smart_install/configuration/guide/smart_install/supported_devices.html\"].\r\n\r\nFor information about which Cisco IOS and IOS XE Software releases are vulnerable, see the Fixed Software [\"#fixed\"] section of this advisory.\r\n  Notes Regarding Specific Releases\r\nSmart Install client functionality is enabled by default on switches that are running Cisco IOS Software releases that have not been updated to address Cisco bug ID CSCvd36820 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd36820\"].\r\n\r\nSwitches that are running releases earlier than Cisco IOS Software Release 12.2(52)SE are not capable of running Smart Install, but they can be Smart Install clients if they support the archive download-sw privileged EXEC command.\r\n  Determining Whether the Smart Install Client Feature Is Enabled\r\nTo determine whether a device is configured with the Smart Install client feature enabled, use the show vstack config privileged EXEC command on the Smart Install client. An output of Role: Client and Oper Mode: Enabled or Role: Client (SmartInstall enabled) from the show vstack config command confirms that the feature is enabled on the device.\r\n\r\nThe following examples show the output of the show vstack config command on Cisco Catalyst Switches that are configured as Smart Install clients:\r\n\r\n\r\nswitch1# show vstack config\r\nRole: Client (SmartInstall enabled)\r\n.\r\n.\r\n.\r\n\r\nswitch2# show vstack config\r\nCapability: Client\r\nOper Mode: Enabled\r\nRole: Client\r\n.\r\n.\r\n.\r\n\r\nDetermining the Cisco IOS Software Release\r\nTo determine which Cisco IOS Software release is running on a device, administrators can log in to the device, use the show version command in the CLI, and then refer to the system banner that appears. If the device is running Cisco IOS Software, the system banner displays text similar to Cisco Internetwork Operating System Software or Cisco IOS Software. The banner also displays the installed image name in parentheses, followed by the Cisco IOS Software release number and release name. Some Cisco devices do not support the show version command or may provide different output.\r\n\r\nThe following example shows the output of the command for a device that is running Cisco IOS Software Release 15.5(2)T1 and has an installed image name of C2951-UNIVERSALK9-M:\r\n\r\n\r\nRouter\u003e show version\r\n  Cisco IOS Software, C2951 Software (C2951-UNIVERSALK9-M), Version 15.5(2)T1, RELEASE SOFTWARE (fc1)  Technical Support: http://www.cisco.com/techsupport  Copyright (c) 1986-2015 by Cisco Systems, Inc.  Compiled Mon 22-Jun-15 09:32 by prod_rel_team  .  .  .\r\n\r\nFor information about the naming and numbering conventions for Cisco IOS Software releases, see the Cisco IOS and NX-OS Software Reference Guide [\"https://www.cisco.com/c/en/us/about/security-center/ios-nx-os-reference-guide.html\"].\r\nDetermining the Cisco IOS XE Software Release\r\nTo determine which Cisco IOS XE Software release is running on a device, administrators can log in to the device, use the show version command in the CLI, and then refer to the system banner that appears. If the device is running Cisco IOS XE Software, the system banner displays Cisco IOS Software, Cisco IOS XE Software, or similar text.\r\n\r\nThe following example shows the output of the command for a device that is running Cisco IOS XE Software Release 16.2.1 and has an installed image name of CAT3K_CAA-UNIVERSALK9-M:\r\n\r\n\r\nios-xe-device# show version\r\n  Cisco IOS Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version Denali 16.2.1, RELEASE SOFTWARE (fc1)  Technical Support: http://www.cisco.com/techsupport  Copyright (c) 1986-2016 by Cisco Systems, Inc.  Compiled Sun 27-Mar-16 21:47 by mcpre  .  .  .\r\n\r\nFor information about the naming and numbering conventions for Cisco IOS XE Software releases, see the Cisco IOS and NX-OS Software Reference Guide [\"https://www.cisco.com/c/en/us/about/security-center/ios-nx-os-reference-guide.html\"].",
        "title": "Vulnerable Products"
      },
      {
        "category": "general",
        "text": "No other Cisco products are currently known to be affected by this vulnerability.\r\n\r\nCisco has confirmed that this vulnerability does not affect Cisco IOS XR Software or Cisco NX-OS Software.",
        "title": "Products Confirmed Not Vulnerable"
      },
      {
        "category": "general",
        "text": "Cisco Smart Install is a \u201cplug-and-play\u201d configuration and image-management feature that provides zero-touch deployment for new (typically access layer) switches. The feature allows a customer to ship a Cisco switch to any location, install it in the network, and power it on without additional configuration requirements. The Smart Install feature incorporates no authentication by design.\r\n\r\nA Smart Install network consists of exactly one Smart Install director switch or router, also known as an integrated branch director (IBD), and one or more Smart Install client switches, also known as integrated branch clients (IBCs). A client switch does not need to be directly connected to the director; the client switch can be up to seven hops away.\r\n\r\nThe director provides a single management point for images and configuration of client switches. When a client switch is first installed in the network, the director automatically detects the new switch and identifies the correct Cisco IOS Software image and the configuration file for downloading. The director can also allocate an IP address and hostname to a client.",
        "title": "Details"
      },
      {
        "category": "general",
        "text": "There are no workarounds that address this vulnerability for customers who require the use of Cisco Smart Install. For customers not requiring Cisco Smart Install, the feature can be disabled with the no vstack command. In software releases that are associated with Cisco Bug ID CSCvd36820 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd36820\"], Cisco Smart Install will auto-disable if not in use.\r\n\r\nAdministrators are encouraged to consult the informational security advisory on Cisco Smart Install Protocol Misuse [\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170214-smi\"] and the Smart Install Configuration Guide [\"http://www.cisco.com/c/en/us/td/docs/switches/lan/smart_install/configuration/guide/smart_install/concepts.html#23355\"].",
        "title": "Workarounds"
      },
      {
        "category": "general",
        "text": "Cisco has released free software updates that address the vulnerability described in this advisory. Customers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:\r\nhttps://www.cisco.com/c/en/us/products/end-user-license-agreement.html [\"https://www.cisco.com/c/en/us/products/end-user-license-agreement.html\"]\r\n\r\nAdditionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades.\r\n\r\nWhen considering software upgrades, customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories and Alerts page [\"https://www.cisco.com/go/psirt\"], to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.\r\n\r\nCustomers Without Service Contracts\r\n\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC:\r\nhttps://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]\r\n\r\nCustomers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n                      Cisco IOS and IOS XE Software\r\nTo help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides a tool, the Cisco IOS Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"], that identifies any Cisco Security Advisories that impact a specific software release and the earliest release that fixes the vulnerabilities described in each advisory (\u201cFirst Fixed\u201d). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities described in all the advisories identified (\u201cCombined First Fixed\u201d).\r\n\r\nCustomers can use this tool to perform the following tasks:\r\n\r\nInitiate a search by choosing one or more releases from a drop-down list or uploading a file from a local system for the tool to parse\r\nEnter the output of the show version command for the tool to parse\r\nCreate a custom search by including all previously published Cisco Security Advisories, a specific advisory, or all advisories in the most recent bundled publication\r\n\r\nTo determine whether a release is affected by any published Cisco Security Advisory, use the Cisco IOS Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"] on Cisco.com or enter a Cisco IOS Software or Cisco IOS XE Software release\u2014for example, 15.1(4)M2 or 3.13.8S\u2014in the following field:\r\n\r\n\r\n\r\n\r\n\r\nFor a mapping of Cisco IOS XE Software releases to Cisco IOS Software releases, refer to the Cisco IOS XE 2 Release Notes [\"https://www.cisco.com/c/en/us/td/docs/ios/ios_xe/2/release/notes/rnasr21/rnasr21_gen.html#wp3000032\"], Cisco IOS XE 3S Release Notes [\"https://www.cisco.com/c/en/us/td/docs/ios/ios_xe/3/release/notes/asr1k_rn_3s_rel_notes/asr1k_rn_3s_sys_req.html#wp3069754\"], or Cisco IOS XE 3SG Release Notes [\"https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/release/note/OL_24726.html#pgfId-2570252\"], depending on the Cisco IOS XE Software release.",
        "title": "Fixed Software"
      },
      {
        "category": "general",
        "text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
        "title": "Vulnerability Policy"
      },
      {
        "category": "general",
        "text": "In November 2021, the Cisco Product Security Incident Response Team (PSIRT) became aware of additional attempted exploitation of this vulnerability in the wild. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability.",
        "title": "Exploitation and Public Announcements"
      },
      {
        "category": "general",
        "text": "Cisco would like to thank George Nosenko from Embedi for reporting this vulnerability via GeekPwn.",
        "title": "Source"
      },
      {
        "category": "legal_disclaimer",
        "text": "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.",
        "title": "Legal Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@cisco.com",
      "issuing_authority": "Cisco PSIRT",
      "name": "Cisco",
      "namespace": "https://wwww.cisco.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"
      },
      {
        "category": "external",
        "summary": "Cisco Event Response: March 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication",
        "url": "https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-66682"
      },
      {
        "category": "external",
        "summary": "Cisco Security Vulnerability Policy",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
      },
      {
        "category": "external",
        "summary": "CSCvd36820",
        "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvd36820"
      },
      {
        "category": "external",
        "summary": "Smart Install Configuration Guide - Supported Devices",
        "url": "https://www.cisco.com/c/en/us/td/docs/switches/lan/smart_install/configuration/guide/smart_install/supported_devices.html"
      },
      {
        "category": "external",
        "summary": "Cisco IOS and NX-OS Software Reference Guide",
        "url": "https://www.cisco.com/c/en/us/about/security-center/ios-nx-os-reference-guide.html"
      },
      {
        "category": "external",
        "summary": "Cisco\u0026nbsp;Smart Install Protocol Misuse",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170214-smi"
      },
      {
        "category": "external",
        "summary": "Smart Install Configuration Guide",
        "url": "http://www.cisco.com/c/en/us/td/docs/switches/lan/smart_install/configuration/guide/smart_install/concepts.html#23355"
      },
      {
        "category": "external",
        "summary": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html",
        "url": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisories and Alerts page",
        "url": "https://www.cisco.com/go/psirt"
      },
      {
        "category": "external",
        "summary": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html",
        "url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"
      },
      {
        "category": "external",
        "summary": "Cisco\u0026nbsp;IOS Software Checker",
        "url": "https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"
      },
      {
        "category": "external",
        "summary": "Cisco\u0026nbsp;IOS XE 2 Release Notes",
        "url": "https://www.cisco.com/c/en/us/td/docs/ios/ios_xe/2/release/notes/rnasr21/rnasr21_gen.html#wp3000032"
      },
      {
        "category": "external",
        "summary": "Cisco\u0026nbsp;IOS XE 3S Release Notes",
        "url": "https://www.cisco.com/c/en/us/td/docs/ios/ios_xe/3/release/notes/asr1k_rn_3s_rel_notes/asr1k_rn_3s_sys_req.html#wp3069754"
      },
      {
        "category": "external",
        "summary": "Cisco\u0026nbsp;IOS XE 3SG Release Notes",
        "url": "https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/release/note/OL_24726.html#pgfId-2570252"
      },
      {
        "category": "external",
        "summary": "Security Vulnerability Policy",
        "url": "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"
      }
    ],
    "title": "Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability",
    "tracking": {
      "current_release_date": "2025-08-20T14:26:26+00:00",
      "generator": {
        "date": "2025-08-20T14:26:31+00:00",
        "engine": {
          "name": "TVCE"
        }
      },
      "id": "cisco-sa-20180328-smi2",
      "initial_release_date": "2018-03-28T16:00:00+00:00",
      "revision_history": [
        {
          "date": "2018-03-28T15:17:05+00:00",
          "number": "1.0.0",
          "summary": "Initial public release."
        },
        {
          "date": "2018-03-29T17:13:23+00:00",
          "number": "1.1.0",
          "summary": "Added the researcher\u0027s company name."
        },
        {
          "date": "2018-04-02T13:18:01+00:00",
          "number": "1.2.0",
          "summary": "Metadata update."
        },
        {
          "date": "2018-04-06T19:35:44+00:00",
          "number": "1.3.0",
          "summary": "Added more details to the Workarounds section."
        },
        {
          "date": "2018-04-09T14:20:12+00:00",
          "number": "1.4.0",
          "summary": "Emphasized that Smart Install is enabled by default. Added a link to the list of devices that support Smart Install."
        },
        {
          "date": "2018-04-16T18:21:34+00:00",
          "number": "1.5.0",
          "summary": "Updated IOS Software Checker with products found to be non-vulnerable."
        },
        {
          "date": "2018-04-17T15:08:41+00:00",
          "number": "1.6.0",
          "summary": "Updated IOS Software Checker with products found to be vulnerable."
        },
        {
          "date": "2018-05-03T19:35:38+00:00",
          "number": "1.7.0",
          "summary": "Updated metadata - Cisco Catalyst 6500 and 6800 Series Switches have been identified as not vulnerable, which resulted in fewer releases being vulnerable. Updated the IOS Software Checker accordingly."
        },
        {
          "date": "2022-12-15T22:19:55+00:00",
          "number": "1.8.0",
          "summary": "Updated exploitation information."
        },
        {
          "date": "2025-08-20T14:26:26+00:00",
          "number": "1.9.0",
          "summary": "Updated information about continued exploitation activity."
        }
      ],
      "status": "final",
      "version": "1.9.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "12.2(55)SE",
                    "product": {
                      "name": "12.2(55)SE",
                      "product_id": "CSAFPID-103763"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)SE3",
                    "product": {
                      "name": "12.2(55)SE3",
                      "product_id": "CSAFPID-105394"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)SE2",
                    "product": {
                      "name": "12.2(55)SE2",
                      "product_id": "CSAFPID-105689"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(58)SE",
                    "product": {
                      "name": "12.2(58)SE",
                      "product_id": "CSAFPID-105987"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)SE1",
                    "product": {
                      "name": "12.2(55)SE1",
                      "product_id": "CSAFPID-106029"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(58)SE1",
                    "product": {
                      "name": "12.2(58)SE1",
                      "product_id": "CSAFPID-109098"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)SE4",
                    "product": {
                      "name": "12.2(55)SE4",
                      "product_id": "CSAFPID-109439"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(58)SE2",
                    "product": {
                      "name": "12.2(58)SE2",
                      "product_id": "CSAFPID-109808"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)SE5",
                    "product": {
                      "name": "12.2(55)SE5",
                      "product_id": "CSAFPID-111674"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)SE6",
                    "product": {
                      "name": "12.2(55)SE6",
                      "product_id": "CSAFPID-114665"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)SE7",
                    "product": {
                      "name": "12.2(55)SE7",
                      "product_id": "CSAFPID-184125"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)SE8",
                    "product": {
                      "name": "12.2(55)SE8",
                      "product_id": "CSAFPID-189187"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)SE9",
                    "product": {
                      "name": "12.2(55)SE9",
                      "product_id": "CSAFPID-192911"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)SE10",
                    "product": {
                      "name": "12.2(55)SE10",
                      "product_id": "CSAFPID-198542"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)SE11",
                    "product": {
                      "name": "12.2(55)SE11",
                      "product_id": "CSAFPID-210732"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)SE12",
                    "product": {
                      "name": "12.2(55)SE12",
                      "product_id": "CSAFPID-228057"
                    }
                  }
                ],
                "category": "product_version",
                "name": "12.2SE"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "12.2(55)EX",
                    "product": {
                      "name": "12.2(55)EX",
                      "product_id": "CSAFPID-106674"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)EX1",
                    "product": {
                      "name": "12.2(55)EX1",
                      "product_id": "CSAFPID-108306"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)EX2",
                    "product": {
                      "name": "12.2(55)EX2",
                      "product_id": "CSAFPID-109760"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(55)EX3",
                    "product": {
                      "name": "12.2(55)EX3",
                      "product_id": "CSAFPID-111019"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(58)EX",
                    "product": {
                      "name": "12.2(58)EX",
                      "product_id": "CSAFPID-113948"
                    }
                  }
                ],
                "category": "product_version",
                "name": "12.2EX"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "12.2(55)EY",
                    "product": {
                      "name": "12.2(55)EY",
                      "product_id": "CSAFPID-103559"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(58)EY",
                    "product": {
                      "name": "12.2(58)EY",
                      "product_id": "CSAFPID-109659"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(58)EY1",
                    "product": {
                      "name": "12.2(58)EY1",
                      "product_id": "CSAFPID-111031"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "12.2(58)EY2",
                    "product": {
                      "name": "12.2(58)EY2",
                      "product_id": "CSAFPID-113073"
                    }
                  }
                ],
                "category": "product_version",
                "name": "12.2EY"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "12.2(55)EZ",
                    "product": {
                      "name": "12.2(55)EZ",
                      "product_id": "CSAFPID-107283"
                    }
                  }
                ],
                "category": "product_version",
                "name": "12.2EZ"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(4)XB4",
                    "product": {
                      "name": "15.1(4)XB4",
                      "product_id": "CSAFPID-108462"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(4)XB5",
                    "product": {
                      "name": "15.1(4)XB5",
                      "product_id": "CSAFPID-109594"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(4)XB6",
                    "product": {
                      "name": "15.1(4)XB6",
                      "product_id": "CSAFPID-111884"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(4)XB5a",
                    "product": {
                      "name": "15.1(4)XB5a",
                      "product_id": "CSAFPID-113966"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(4)XB7",
                    "product": {
                      "name": "15.1(4)XB7",
                      "product_id": "CSAFPID-114012"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(4)XB8",
                    "product": {
                      "name": "15.1(4)XB8",
                      "product_id": "CSAFPID-115982"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(4)XB8a",
                    "product": {
                      "name": "15.1(4)XB8a",
                      "product_id": "CSAFPID-116254"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1XB"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.0(1)EY",
                    "product": {
                      "name": "15.0(1)EY",
                      "product_id": "CSAFPID-104376"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(1)EY1",
                    "product": {
                      "name": "15.0(1)EY1",
                      "product_id": "CSAFPID-115969"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(1)EY2",
                    "product": {
                      "name": "15.0(1)EY2",
                      "product_id": "CSAFPID-187269"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.0EY"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.0(1)SE",
                    "product": {
                      "name": "15.0(1)SE",
                      "product_id": "CSAFPID-105660"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE",
                    "product": {
                      "name": "15.0(2)SE",
                      "product_id": "CSAFPID-107852"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(1)SE1",
                    "product": {
                      "name": "15.0(1)SE1",
                      "product_id": "CSAFPID-111010"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(1)SE2",
                    "product": {
                      "name": "15.0(1)SE2",
                      "product_id": "CSAFPID-113961"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(1)SE3",
                    "product": {
                      "name": "15.0(1)SE3",
                      "product_id": "CSAFPID-115832"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE1",
                    "product": {
                      "name": "15.0(2)SE1",
                      "product_id": "CSAFPID-115939"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE2",
                    "product": {
                      "name": "15.0(2)SE2",
                      "product_id": "CSAFPID-116083"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE3",
                    "product": {
                      "name": "15.0(2)SE3",
                      "product_id": "CSAFPID-189455"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE4",
                    "product": {
                      "name": "15.0(2)SE4",
                      "product_id": "CSAFPID-190635"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE5",
                    "product": {
                      "name": "15.0(2)SE5",
                      "product_id": "CSAFPID-192706"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE6",
                    "product": {
                      "name": "15.0(2)SE6",
                      "product_id": "CSAFPID-195770"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE7",
                    "product": {
                      "name": "15.0(2)SE7",
                      "product_id": "CSAFPID-204097"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE8",
                    "product": {
                      "name": "15.0(2)SE8",
                      "product_id": "CSAFPID-209028"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE9",
                    "product": {
                      "name": "15.0(2)SE9",
                      "product_id": "CSAFPID-209029"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2a)SE9",
                    "product": {
                      "name": "15.0(2a)SE9",
                      "product_id": "CSAFPID-212329"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE10",
                    "product": {
                      "name": "15.0(2)SE10",
                      "product_id": "CSAFPID-213788"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE11",
                    "product": {
                      "name": "15.0(2)SE11",
                      "product_id": "CSAFPID-220466"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE10a",
                    "product": {
                      "name": "15.0(2)SE10a",
                      "product_id": "CSAFPID-222342"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.0SE"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(2)SG",
                    "product": {
                      "name": "15.1(2)SG",
                      "product_id": "CSAFPID-115477"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(2)SG1",
                    "product": {
                      "name": "15.1(2)SG1",
                      "product_id": "CSAFPID-188035"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(2)SG2",
                    "product": {
                      "name": "15.1(2)SG2",
                      "product_id": "CSAFPID-193283"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(2)SG3",
                    "product": {
                      "name": "15.1(2)SG3",
                      "product_id": "CSAFPID-194741"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(2)SG4",
                    "product": {
                      "name": "15.1(2)SG4",
                      "product_id": "CSAFPID-195489"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(2)SG5",
                    "product": {
                      "name": "15.1(2)SG5",
                      "product_id": "CSAFPID-197465"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(2)SG6",
                    "product": {
                      "name": "15.1(2)SG6",
                      "product_id": "CSAFPID-204187"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(2)SG7",
                    "product": {
                      "name": "15.1(2)SG7",
                      "product_id": "CSAFPID-209034"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(2)SG8",
                    "product": {
                      "name": "15.1(2)SG8",
                      "product_id": "CSAFPID-214992"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SG"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.0(1)EX",
                    "product": {
                      "name": "15.0(1)EX",
                      "product_id": "CSAFPID-109442"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX",
                    "product": {
                      "name": "15.0(2)EX",
                      "product_id": "CSAFPID-189064"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX1",
                    "product": {
                      "name": "15.0(2)EX1",
                      "product_id": "CSAFPID-189115"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX2",
                    "product": {
                      "name": "15.0(2)EX2",
                      "product_id": "CSAFPID-192910"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX3",
                    "product": {
                      "name": "15.0(2)EX3",
                      "product_id": "CSAFPID-194540"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX4",
                    "product": {
                      "name": "15.0(2)EX4",
                      "product_id": "CSAFPID-194913"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX5",
                    "product": {
                      "name": "15.0(2)EX5",
                      "product_id": "CSAFPID-195943"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX6",
                    "product": {
                      "name": "15.0(2)EX6",
                      "product_id": "CSAFPID-200496"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX7",
                    "product": {
                      "name": "15.0(2)EX7",
                      "product_id": "CSAFPID-201366"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX8",
                    "product": {
                      "name": "15.0(2)EX8",
                      "product_id": "CSAFPID-204831"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2a)EX5",
                    "product": {
                      "name": "15.0(2a)EX5",
                      "product_id": "CSAFPID-205064"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX10",
                    "product": {
                      "name": "15.0(2)EX10",
                      "product_id": "CSAFPID-211570"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX11",
                    "product": {
                      "name": "15.0(2)EX11",
                      "product_id": "CSAFPID-214797"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX13",
                    "product": {
                      "name": "15.0(2)EX13",
                      "product_id": "CSAFPID-225160"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX12",
                    "product": {
                      "name": "15.0(2)EX12",
                      "product_id": "CSAFPID-230965"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.0EX"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.2(1)E",
                    "product": {
                      "name": "15.2(1)E",
                      "product_id": "CSAFPID-183811"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E",
                    "product": {
                      "name": "15.2(2)E",
                      "product_id": "CSAFPID-187057"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(1)E1",
                    "product": {
                      "name": "15.2(1)E1",
                      "product_id": "CSAFPID-195469"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3)E",
                    "product": {
                      "name": "15.2(3)E",
                      "product_id": "CSAFPID-197483"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(1)E2",
                    "product": {
                      "name": "15.2(1)E2",
                      "product_id": "CSAFPID-198060"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(1)E3",
                    "product": {
                      "name": "15.2(1)E3",
                      "product_id": "CSAFPID-200488"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E1",
                    "product": {
                      "name": "15.2(2)E1",
                      "product_id": "CSAFPID-201074"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2b)E",
                    "product": {
                      "name": "15.2(2b)E",
                      "product_id": "CSAFPID-204102"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E",
                    "product": {
                      "name": "15.2(4)E",
                      "product_id": "CSAFPID-204108"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3)E1",
                    "product": {
                      "name": "15.2(3)E1",
                      "product_id": "CSAFPID-204186"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E2",
                    "product": {
                      "name": "15.2(2)E2",
                      "product_id": "CSAFPID-204228"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2a)E1",
                    "product": {
                      "name": "15.2(2a)E1",
                      "product_id": "CSAFPID-204818"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E3",
                    "product": {
                      "name": "15.2(2)E3",
                      "product_id": "CSAFPID-205672"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2a)E2",
                    "product": {
                      "name": "15.2(2a)E2",
                      "product_id": "CSAFPID-209045"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3)E2",
                    "product": {
                      "name": "15.2(3)E2",
                      "product_id": "CSAFPID-209046"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3a)E",
                    "product": {
                      "name": "15.2(3a)E",
                      "product_id": "CSAFPID-209047"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3)E3",
                    "product": {
                      "name": "15.2(3)E3",
                      "product_id": "CSAFPID-209358"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3m)E2",
                    "product": {
                      "name": "15.2(3m)E2",
                      "product_id": "CSAFPID-209359"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E1",
                    "product": {
                      "name": "15.2(4)E1",
                      "product_id": "CSAFPID-209887"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E4",
                    "product": {
                      "name": "15.2(2)E4",
                      "product_id": "CSAFPID-210766"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E5",
                    "product": {
                      "name": "15.2(2)E5",
                      "product_id": "CSAFPID-211296"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E2",
                    "product": {
                      "name": "15.2(4)E2",
                      "product_id": "CSAFPID-213610"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4m)E1",
                    "product": {
                      "name": "15.2(4m)E1",
                      "product_id": "CSAFPID-214072"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3)E4",
                    "product": {
                      "name": "15.2(3)E4",
                      "product_id": "CSAFPID-214078"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(5)E",
                    "product": {
                      "name": "15.2(5)E",
                      "product_id": "CSAFPID-214556"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3m)E7",
                    "product": {
                      "name": "15.2(3m)E7",
                      "product_id": "CSAFPID-216295"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E3",
                    "product": {
                      "name": "15.2(4)E3",
                      "product_id": "CSAFPID-217805"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E6",
                    "product": {
                      "name": "15.2(2)E6",
                      "product_id": "CSAFPID-218891"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(5a)E",
                    "product": {
                      "name": "15.2(5a)E",
                      "product_id": "CSAFPID-218995"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(5)E1",
                    "product": {
                      "name": "15.2(5)E1",
                      "product_id": "CSAFPID-220441"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(5b)E",
                    "product": {
                      "name": "15.2(5b)E",
                      "product_id": "CSAFPID-220457"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4m)E3",
                    "product": {
                      "name": "15.2(4m)E3",
                      "product_id": "CSAFPID-220664"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3m)E8",
                    "product": {
                      "name": "15.2(3m)E8",
                      "product_id": "CSAFPID-220689"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E5a",
                    "product": {
                      "name": "15.2(2)E5a",
                      "product_id": "CSAFPID-221033"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(5c)E",
                    "product": {
                      "name": "15.2(5c)E",
                      "product_id": "CSAFPID-221137"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E5b",
                    "product": {
                      "name": "15.2(2)E5b",
                      "product_id": "CSAFPID-222436"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4n)E2",
                    "product": {
                      "name": "15.2(4n)E2",
                      "product_id": "CSAFPID-222500"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4o)E2",
                    "product": {
                      "name": "15.2(4o)E2",
                      "product_id": "CSAFPID-222924"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(5a)E1",
                    "product": {
                      "name": "15.2(5a)E1",
                      "product_id": "CSAFPID-223143"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E4",
                    "product": {
                      "name": "15.2(4)E4",
                      "product_id": "CSAFPID-224553"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E7",
                    "product": {
                      "name": "15.2(2)E7",
                      "product_id": "CSAFPID-224868"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(5)E2",
                    "product": {
                      "name": "15.2(5)E2",
                      "product_id": "CSAFPID-225740"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4p)E1",
                    "product": {
                      "name": "15.2(4p)E1",
                      "product_id": "CSAFPID-226077"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E",
                    "product": {
                      "name": "15.2(6)E",
                      "product_id": "CSAFPID-227598"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E5",
                    "product": {
                      "name": "15.2(4)E5",
                      "product_id": "CSAFPID-227959"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(5)E2c",
                    "product": {
                      "name": "15.2(5)E2c",
                      "product_id": "CSAFPID-228151"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4m)E2",
                    "product": {
                      "name": "15.2(4m)E2",
                      "product_id": "CSAFPID-230588"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4o)E3",
                    "product": {
                      "name": "15.2(4o)E3",
                      "product_id": "CSAFPID-230589"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4q)E1",
                    "product": {
                      "name": "15.2(4q)E1",
                      "product_id": "CSAFPID-230590"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E0a",
                    "product": {
                      "name": "15.2(6)E0a",
                      "product_id": "CSAFPID-230591"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E0b",
                    "product": {
                      "name": "15.2(6)E0b",
                      "product_id": "CSAFPID-230623"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E0c",
                    "product": {
                      "name": "15.2(6)E0c",
                      "product_id": "CSAFPID-231245"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4s)E1",
                    "product": {
                      "name": "15.2(4s)E1",
                      "product_id": "CSAFPID-241916"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4s)E2",
                    "product": {
                      "name": "15.2(4s)E2",
                      "product_id": "CSAFPID-250628"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.2E"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.2(4)JN",
                    "product": {
                      "name": "15.2(4)JN",
                      "product_id": "CSAFPID-194433"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.2JN"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EZ",
                    "product": {
                      "name": "15.0(2)EZ",
                      "product_id": "CSAFPID-190637"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.0EZ"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.2(1)EY",
                    "product": {
                      "name": "15.2(1)EY",
                      "product_id": "CSAFPID-191928"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.2EY"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EJ",
                    "product": {
                      "name": "15.0(2)EJ",
                      "product_id": "CSAFPID-191948"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EJ1",
                    "product": {
                      "name": "15.0(2)EJ1",
                      "product_id": "CSAFPID-197471"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.0EJ"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.2(5)EX",
                    "product": {
                      "name": "15.2(5)EX",
                      "product_id": "CSAFPID-222530"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.2EX"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.2(4)JAZ1",
                    "product": {
                      "name": "15.2(4)JAZ1",
                      "product_id": "CSAFPID-200503"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.2JAZ"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.2(2)EB",
                    "product": {
                      "name": "15.2(2)EB",
                      "product_id": "CSAFPID-197462"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)EB1",
                    "product": {
                      "name": "15.2(2)EB1",
                      "product_id": "CSAFPID-209839"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)EB2",
                    "product": {
                      "name": "15.2(2)EB2",
                      "product_id": "CSAFPID-214218"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.2EB"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.2(2)EA",
                    "product": {
                      "name": "15.2(2)EA",
                      "product_id": "CSAFPID-198063"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)EA1",
                    "product": {
                      "name": "15.2(2)EA1",
                      "product_id": "CSAFPID-209049"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)EA2",
                    "product": {
                      "name": "15.2(2)EA2",
                      "product_id": "CSAFPID-209050"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3)EA",
                    "product": {
                      "name": "15.2(3)EA",
                      "product_id": "CSAFPID-209051"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)EA",
                    "product": {
                      "name": "15.2(4)EA",
                      "product_id": "CSAFPID-210203"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)EA1",
                    "product": {
                      "name": "15.2(4)EA1",
                      "product_id": "CSAFPID-210958"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)EA3",
                    "product": {
                      "name": "15.2(2)EA3",
                      "product_id": "CSAFPID-214217"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)EA3",
                    "product": {
                      "name": "15.2(4)EA3",
                      "product_id": "CSAFPID-214965"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(5)EA",
                    "product": {
                      "name": "15.2(5)EA",
                      "product_id": "CSAFPID-220038"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)EA4",
                    "product": {
                      "name": "15.2(4)EA4",
                      "product_id": "CSAFPID-220460"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)EA2",
                    "product": {
                      "name": "15.2(4)EA2",
                      "product_id": "CSAFPID-220507"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)EA5",
                    "product": {
                      "name": "15.2(4)EA5",
                      "product_id": "CSAFPID-222419"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)EA6",
                    "product": {
                      "name": "15.2(4)EA6",
                      "product_id": "CSAFPID-228075"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.2EA"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.6(2)S0a",
                    "product": {
                      "name": "15.6(2)S0a",
                      "product_id": "CSAFPID-214937"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.6S"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.2(4)EC1",
                    "product": {
                      "name": "15.2(4)EC1",
                      "product_id": "CSAFPID-220461"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)EC2",
                    "product": {
                      "name": "15.2(4)EC2",
                      "product_id": "CSAFPID-223086"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.2EC"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.3(3)JPC5",
                    "product": {
                      "name": "15.3(3)JPC5",
                      "product_id": "CSAFPID-230995"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.3JPC"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVR1",
                    "product": {
                      "name": "15.1(3)SVR1",
                      "product_id": "CSAFPID-277230"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVR2",
                    "product": {
                      "name": "15.1(3)SVR2",
                      "product_id": "CSAFPID-277253"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVR3",
                    "product": {
                      "name": "15.1(3)SVR3",
                      "product_id": "CSAFPID-279337"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVR10",
                    "product": {
                      "name": "15.1(3)SVR10",
                      "product_id": "CSAFPID-290618"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVR"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.3(3)JPI",
                    "product": {
                      "name": "15.3(3)JPI",
                      "product_id": "CSAFPID-274202"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.3JPI"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.3(3)JPJ",
                    "product": {
                      "name": "15.3(3)JPJ",
                      "product_id": "CSAFPID-275845"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.3JPJ"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVS",
                    "product": {
                      "name": "15.1(3)SVS",
                      "product_id": "CSAFPID-277232"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVS1",
                    "product": {
                      "name": "15.1(3)SVS1",
                      "product_id": "CSAFPID-279335"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVS"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVT1",
                    "product": {
                      "name": "15.1(3)SVT1",
                      "product_id": "CSAFPID-280759"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVT2",
                    "product": {
                      "name": "15.1(3)SVT2",
                      "product_id": "CSAFPID-282026"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVT3",
                    "product": {
                      "name": "15.1(3)SVT3",
                      "product_id": "CSAFPID-284785"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVT4",
                    "product": {
                      "name": "15.1(3)SVT4",
                      "product_id": "CSAFPID-286399"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVT"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVU1",
                    "product": {
                      "name": "15.1(3)SVU1",
                      "product_id": "CSAFPID-283833"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVU10",
                    "product": {
                      "name": "15.1(3)SVU10",
                      "product_id": "CSAFPID-284291"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVU2",
                    "product": {
                      "name": "15.1(3)SVU2",
                      "product_id": "CSAFPID-284566"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVU11",
                    "product": {
                      "name": "15.1(3)SVU11",
                      "product_id": "CSAFPID-286400"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVU20",
                    "product": {
                      "name": "15.1(3)SVU20",
                      "product_id": "CSAFPID-289270"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVU21",
                    "product": {
                      "name": "15.1(3)SVU21",
                      "product_id": "CSAFPID-290557"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVU"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVV1",
                    "product": {
                      "name": "15.1(3)SVV1",
                      "product_id": "CSAFPID-284341"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVV2",
                    "product": {
                      "name": "15.1(3)SVV2",
                      "product_id": "CSAFPID-286029"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVV3",
                    "product": {
                      "name": "15.1(3)SVV3",
                      "product_id": "CSAFPID-286940"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVV4",
                    "product": {
                      "name": "15.1(3)SVV4",
                      "product_id": "CSAFPID-289371"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVV"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVW",
                    "product": {
                      "name": "15.1(3)SVW",
                      "product_id": "CSAFPID-286451"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVW1",
                    "product": {
                      "name": "15.1(3)SVW1",
                      "product_id": "CSAFPID-286844"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVW"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVX",
                    "product": {
                      "name": "15.1(3)SVX",
                      "product_id": "CSAFPID-286927"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVX1",
                    "product": {
                      "name": "15.1(3)SVX1",
                      "product_id": "CSAFPID-289301"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVX"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.3(3)JPR1",
                    "product": {
                      "name": "15.3(3)JPR1",
                      "product_id": "CSAFPID-300950"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.3JPR"
              }
            ],
            "category": "product_family",
            "name": "IOS"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.2.0SE",
                    "product": {
                      "name": "3.2.0SE",
                      "product_id": "CSAFPID-196216"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.2.1SE",
                    "product": {
                      "name": "3.2.1SE",
                      "product_id": "CSAFPID-196221"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.2.2SE",
                    "product": {
                      "name": "3.2.2SE",
                      "product_id": "CSAFPID-196222"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.2.3SE",
                    "product": {
                      "name": "3.2.3SE",
                      "product_id": "CSAFPID-196223"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.2SE"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.3.0SE",
                    "product": {
                      "name": "3.3.0SE",
                      "product_id": "CSAFPID-196218"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.3.1SE",
                    "product": {
                      "name": "3.3.1SE",
                      "product_id": "CSAFPID-196925"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.3.2SE",
                    "product": {
                      "name": "3.3.2SE",
                      "product_id": "CSAFPID-206200"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.3.3SE",
                    "product": {
                      "name": "3.3.3SE",
                      "product_id": "CSAFPID-206201"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.3.4SE",
                    "product": {
                      "name": "3.3.4SE",
                      "product_id": "CSAFPID-206202"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.3.5SE",
                    "product": {
                      "name": "3.3.5SE",
                      "product_id": "CSAFPID-206203"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.3SE"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.4.0SG",
                    "product": {
                      "name": "3.4.0SG",
                      "product_id": "CSAFPID-196230"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.4.2SG",
                    "product": {
                      "name": "3.4.2SG",
                      "product_id": "CSAFPID-196231"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.4.1SG",
                    "product": {
                      "name": "3.4.1SG",
                      "product_id": "CSAFPID-196288"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.4.3SG",
                    "product": {
                      "name": "3.4.3SG",
                      "product_id": "CSAFPID-206165"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.4.4SG",
                    "product": {
                      "name": "3.4.4SG",
                      "product_id": "CSAFPID-206166"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.4.5SG",
                    "product": {
                      "name": "3.4.5SG",
                      "product_id": "CSAFPID-206167"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.4.6SG",
                    "product": {
                      "name": "3.4.6SG",
                      "product_id": "CSAFPID-210070"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.4.7SG",
                    "product": {
                      "name": "3.4.7SG",
                      "product_id": "CSAFPID-213785"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.4.8SG",
                    "product": {
                      "name": "3.4.8SG",
                      "product_id": "CSAFPID-221185"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.4SG"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.5.0E",
                    "product": {
                      "name": "3.5.0E",
                      "product_id": "CSAFPID-197145"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.5.1E",
                    "product": {
                      "name": "3.5.1E",
                      "product_id": "CSAFPID-206168"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.5.2E",
                    "product": {
                      "name": "3.5.2E",
                      "product_id": "CSAFPID-206169"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.5.3E",
                    "product": {
                      "name": "3.5.3E",
                      "product_id": "CSAFPID-206170"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.5E"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.6.0E",
                    "product": {
                      "name": "3.6.0E",
                      "product_id": "CSAFPID-206172"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.6.1E",
                    "product": {
                      "name": "3.6.1E",
                      "product_id": "CSAFPID-206173"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.6.0bE",
                    "product": {
                      "name": "3.6.0bE",
                      "product_id": "CSAFPID-210074"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.6.3E",
                    "product": {
                      "name": "3.6.3E",
                      "product_id": "CSAFPID-212674"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.6.4E",
                    "product": {
                      "name": "3.6.4E",
                      "product_id": "CSAFPID-213790"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.6.5E",
                    "product": {
                      "name": "3.6.5E",
                      "product_id": "CSAFPID-217279"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.6.6E",
                    "product": {
                      "name": "3.6.6E",
                      "product_id": "CSAFPID-220357"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.6.5aE",
                    "product": {
                      "name": "3.6.5aE",
                      "product_id": "CSAFPID-221108"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.6.5bE",
                    "product": {
                      "name": "3.6.5bE",
                      "product_id": "CSAFPID-222435"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.6.7E",
                    "product": {
                      "name": "3.6.7E",
                      "product_id": "CSAFPID-224840"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.6E"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.7.0E",
                    "product": {
                      "name": "3.7.0E",
                      "product_id": "CSAFPID-206211"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.7.1E",
                    "product": {
                      "name": "3.7.1E",
                      "product_id": "CSAFPID-210076"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.7.2E",
                    "product": {
                      "name": "3.7.2E",
                      "product_id": "CSAFPID-210077"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.7.3E",
                    "product": {
                      "name": "3.7.3E",
                      "product_id": "CSAFPID-213797"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.7.4E",
                    "product": {
                      "name": "3.7.4E",
                      "product_id": "CSAFPID-217280"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.7.5E",
                    "product": {
                      "name": "3.7.5E",
                      "product_id": "CSAFPID-220290"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.7E"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.1.1",
                    "product": {
                      "name": "16.1.1",
                      "product_id": "CSAFPID-212436"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.1.2",
                    "product": {
                      "name": "16.1.2",
                      "product_id": "CSAFPID-213100"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.1.3",
                    "product": {
                      "name": "16.1.3",
                      "product_id": "CSAFPID-214993"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.1"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.2.1",
                    "product": {
                      "name": "16.2.1",
                      "product_id": "CSAFPID-213809"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.2.2",
                    "product": {
                      "name": "16.2.2",
                      "product_id": "CSAFPID-217253"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.2"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.8.0E",
                    "product": {
                      "name": "3.8.0E",
                      "product_id": "CSAFPID-213811"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.8.1E",
                    "product": {
                      "name": "3.8.1E",
                      "product_id": "CSAFPID-213812"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.8.2E",
                    "product": {
                      "name": "3.8.2E",
                      "product_id": "CSAFPID-217283"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.8.3E",
                    "product": {
                      "name": "3.8.3E",
                      "product_id": "CSAFPID-220489"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.8.4E",
                    "product": {
                      "name": "3.8.4E",
                      "product_id": "CSAFPID-222695"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.8.5E",
                    "product": {
                      "name": "3.8.5E",
                      "product_id": "CSAFPID-226331"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.8.5aE",
                    "product": {
                      "name": "3.8.5aE",
                      "product_id": "CSAFPID-231004"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.8E"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.3.1",
                    "product": {
                      "name": "16.3.1",
                      "product_id": "CSAFPID-213960"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.2",
                    "product": {
                      "name": "16.3.2",
                      "product_id": "CSAFPID-217255"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.3",
                    "product": {
                      "name": "16.3.3",
                      "product_id": "CSAFPID-217256"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.1a",
                    "product": {
                      "name": "16.3.1a",
                      "product_id": "CSAFPID-220802"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.4",
                    "product": {
                      "name": "16.3.4",
                      "product_id": "CSAFPID-222711"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.5",
                    "product": {
                      "name": "16.3.5",
                      "product_id": "CSAFPID-229124"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.5b",
                    "product": {
                      "name": "16.3.5b",
                      "product_id": "CSAFPID-231187"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.3"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.4.1",
                    "product": {
                      "name": "16.4.1",
                      "product_id": "CSAFPID-214051"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.4"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.5.1",
                    "product": {
                      "name": "16.5.1",
                      "product_id": "CSAFPID-217259"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.5.1a",
                    "product": {
                      "name": "16.5.1a",
                      "product_id": "CSAFPID-225784"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.5"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.9.0E",
                    "product": {
                      "name": "3.9.0E",
                      "product_id": "CSAFPID-217282"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.9.1E",
                    "product": {
                      "name": "3.9.1E",
                      "product_id": "CSAFPID-222483"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.9.2E",
                    "product": {
                      "name": "3.9.2E",
                      "product_id": "CSAFPID-226158"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.9.2bE",
                    "product": {
                      "name": "3.9.2bE",
                      "product_id": "CSAFPID-227755"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.9E"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.6.1",
                    "product": {
                      "name": "16.6.1",
                      "product_id": "CSAFPID-218901"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.6"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.10.0E",
                    "product": {
                      "name": "3.10.0E",
                      "product_id": "CSAFPID-227555"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.10.0cE",
                    "product": {
                      "name": "3.10.0cE",
                      "product_id": "CSAFPID-231246"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.10E"
              }
            ],
            "category": "product_family",
            "name": "Cisco IOS XE Software"
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-0171",
      "ids": [
        {
          "system_name": "Cisco Bug ID",
          "text": "CSCvg76186"
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "Complete.",
          "title": "Affected Product Comprehensiveness"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-103559",
          "CSAFPID-103763",
          "CSAFPID-104376",
          "CSAFPID-105394",
          "CSAFPID-105660",
          "CSAFPID-105689",
          "CSAFPID-105987",
          "CSAFPID-106029",
          "CSAFPID-106674",
          "CSAFPID-107283",
          "CSAFPID-107852",
          "CSAFPID-108306",
          "CSAFPID-108462",
          "CSAFPID-109098",
          "CSAFPID-109439",
          "CSAFPID-109442",
          "CSAFPID-109594",
          "CSAFPID-109659",
          "CSAFPID-109760",
          "CSAFPID-109808",
          "CSAFPID-111010",
          "CSAFPID-111019",
          "CSAFPID-111031",
          "CSAFPID-111674",
          "CSAFPID-111884",
          "CSAFPID-113073",
          "CSAFPID-113948",
          "CSAFPID-113961",
          "CSAFPID-113966",
          "CSAFPID-114012",
          "CSAFPID-114665",
          "CSAFPID-115477",
          "CSAFPID-115832",
          "CSAFPID-115939",
          "CSAFPID-115969",
          "CSAFPID-115982",
          "CSAFPID-116083",
          "CSAFPID-116254",
          "CSAFPID-183811",
          "CSAFPID-184125",
          "CSAFPID-187057",
          "CSAFPID-187269",
          "CSAFPID-188035",
          "CSAFPID-189064",
          "CSAFPID-189115",
          "CSAFPID-189187",
          "CSAFPID-189455",
          "CSAFPID-190635",
          "CSAFPID-190637",
          "CSAFPID-191928",
          "CSAFPID-191948",
          "CSAFPID-192706",
          "CSAFPID-192910",
          "CSAFPID-192911",
          "CSAFPID-193283",
          "CSAFPID-194433",
          "CSAFPID-194540",
          "CSAFPID-194741",
          "CSAFPID-194913",
          "CSAFPID-195469",
          "CSAFPID-195489",
          "CSAFPID-195770",
          "CSAFPID-195943",
          "CSAFPID-197462",
          "CSAFPID-197465",
          "CSAFPID-197471",
          "CSAFPID-197483",
          "CSAFPID-198060",
          "CSAFPID-198063",
          "CSAFPID-198542",
          "CSAFPID-200488",
          "CSAFPID-200496",
          "CSAFPID-200503",
          "CSAFPID-201074",
          "CSAFPID-201366",
          "CSAFPID-204097",
          "CSAFPID-204102",
          "CSAFPID-204108",
          "CSAFPID-204186",
          "CSAFPID-204187",
          "CSAFPID-204228",
          "CSAFPID-204818",
          "CSAFPID-204831",
          "CSAFPID-205064",
          "CSAFPID-205672",
          "CSAFPID-209028",
          "CSAFPID-209029",
          "CSAFPID-209034",
          "CSAFPID-209045",
          "CSAFPID-209046",
          "CSAFPID-209047",
          "CSAFPID-209049",
          "CSAFPID-209050",
          "CSAFPID-209051",
          "CSAFPID-209358",
          "CSAFPID-209359",
          "CSAFPID-209839",
          "CSAFPID-209887",
          "CSAFPID-210203",
          "CSAFPID-210732",
          "CSAFPID-210766",
          "CSAFPID-210958",
          "CSAFPID-211296",
          "CSAFPID-211570",
          "CSAFPID-212329",
          "CSAFPID-213610",
          "CSAFPID-213788",
          "CSAFPID-214072",
          "CSAFPID-214078",
          "CSAFPID-214217",
          "CSAFPID-214218",
          "CSAFPID-214556",
          "CSAFPID-214797",
          "CSAFPID-214937",
          "CSAFPID-214965",
          "CSAFPID-214992",
          "CSAFPID-216295",
          "CSAFPID-217805",
          "CSAFPID-218891",
          "CSAFPID-218995",
          "CSAFPID-220038",
          "CSAFPID-220441",
          "CSAFPID-220457",
          "CSAFPID-220460",
          "CSAFPID-220461",
          "CSAFPID-220466",
          "CSAFPID-220507",
          "CSAFPID-220664",
          "CSAFPID-220689",
          "CSAFPID-221033",
          "CSAFPID-221137",
          "CSAFPID-222342",
          "CSAFPID-222419",
          "CSAFPID-222436",
          "CSAFPID-222500",
          "CSAFPID-222530",
          "CSAFPID-222924",
          "CSAFPID-223086",
          "CSAFPID-223143",
          "CSAFPID-224553",
          "CSAFPID-224868",
          "CSAFPID-225160",
          "CSAFPID-225740",
          "CSAFPID-226077",
          "CSAFPID-227598",
          "CSAFPID-227959",
          "CSAFPID-228057",
          "CSAFPID-228075",
          "CSAFPID-228151",
          "CSAFPID-230588",
          "CSAFPID-230589",
          "CSAFPID-230590",
          "CSAFPID-230591",
          "CSAFPID-230623",
          "CSAFPID-230965",
          "CSAFPID-230995",
          "CSAFPID-231245",
          "CSAFPID-241916",
          "CSAFPID-250628",
          "CSAFPID-274202",
          "CSAFPID-275845",
          "CSAFPID-277230",
          "CSAFPID-277232",
          "CSAFPID-277253",
          "CSAFPID-279335",
          "CSAFPID-279337",
          "CSAFPID-280759",
          "CSAFPID-282026",
          "CSAFPID-283833",
          "CSAFPID-284291",
          "CSAFPID-284341",
          "CSAFPID-284566",
          "CSAFPID-284785",
          "CSAFPID-286029",
          "CSAFPID-286399",
          "CSAFPID-286400",
          "CSAFPID-286451",
          "CSAFPID-286844",
          "CSAFPID-286927",
          "CSAFPID-286940",
          "CSAFPID-289270",
          "CSAFPID-289301",
          "CSAFPID-289371",
          "CSAFPID-290557",
          "CSAFPID-290618",
          "CSAFPID-300950",
          "CSAFPID-196216",
          "CSAFPID-196218",
          "CSAFPID-196221",
          "CSAFPID-196222",
          "CSAFPID-196223",
          "CSAFPID-196230",
          "CSAFPID-196231",
          "CSAFPID-196288",
          "CSAFPID-196925",
          "CSAFPID-197145",
          "CSAFPID-206165",
          "CSAFPID-206166",
          "CSAFPID-206167",
          "CSAFPID-206168",
          "CSAFPID-206169",
          "CSAFPID-206170",
          "CSAFPID-206172",
          "CSAFPID-206173",
          "CSAFPID-206200",
          "CSAFPID-206201",
          "CSAFPID-206202",
          "CSAFPID-206203",
          "CSAFPID-206211",
          "CSAFPID-210070",
          "CSAFPID-210074",
          "CSAFPID-210076",
          "CSAFPID-210077",
          "CSAFPID-212436",
          "CSAFPID-212674",
          "CSAFPID-213100",
          "CSAFPID-213785",
          "CSAFPID-213790",
          "CSAFPID-213797",
          "CSAFPID-213809",
          "CSAFPID-213811",
          "CSAFPID-213812",
          "CSAFPID-213960",
          "CSAFPID-214051",
          "CSAFPID-214993",
          "CSAFPID-217253",
          "CSAFPID-217255",
          "CSAFPID-217256",
          "CSAFPID-217259",
          "CSAFPID-217279",
          "CSAFPID-217280",
          "CSAFPID-217282",
          "CSAFPID-217283",
          "CSAFPID-218901",
          "CSAFPID-220290",
          "CSAFPID-220357",
          "CSAFPID-220489",
          "CSAFPID-220802",
          "CSAFPID-221108",
          "CSAFPID-221185",
          "CSAFPID-222435",
          "CSAFPID-222483",
          "CSAFPID-222695",
          "CSAFPID-222711",
          "CSAFPID-224840",
          "CSAFPID-225784",
          "CSAFPID-226158",
          "CSAFPID-226331",
          "CSAFPID-227555",
          "CSAFPID-227755",
          "CSAFPID-229124",
          "CSAFPID-231004",
          "CSAFPID-231187",
          "CSAFPID-231246"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Cisco has released software updates that address this vulnerability.",
          "product_ids": [
            "CSAFPID-196216",
            "CSAFPID-196218",
            "CSAFPID-196221",
            "CSAFPID-196222",
            "CSAFPID-196223",
            "CSAFPID-196230",
            "CSAFPID-196231",
            "CSAFPID-196288",
            "CSAFPID-196925",
            "CSAFPID-197145",
            "CSAFPID-206165",
            "CSAFPID-206166",
            "CSAFPID-206167",
            "CSAFPID-206168",
            "CSAFPID-206169",
            "CSAFPID-206170",
            "CSAFPID-206172",
            "CSAFPID-206173",
            "CSAFPID-206200",
            "CSAFPID-206201",
            "CSAFPID-206202",
            "CSAFPID-206203",
            "CSAFPID-206211",
            "CSAFPID-210070",
            "CSAFPID-210074",
            "CSAFPID-210076",
            "CSAFPID-210077",
            "CSAFPID-212436",
            "CSAFPID-212674",
            "CSAFPID-213100",
            "CSAFPID-213785",
            "CSAFPID-213790",
            "CSAFPID-213797",
            "CSAFPID-213809",
            "CSAFPID-213811",
            "CSAFPID-213812",
            "CSAFPID-213960",
            "CSAFPID-214051",
            "CSAFPID-214993",
            "CSAFPID-217253",
            "CSAFPID-217255",
            "CSAFPID-217256",
            "CSAFPID-217259",
            "CSAFPID-217279",
            "CSAFPID-217280",
            "CSAFPID-217282",
            "CSAFPID-217283",
            "CSAFPID-218901",
            "CSAFPID-220290",
            "CSAFPID-220357",
            "CSAFPID-220489",
            "CSAFPID-220802",
            "CSAFPID-221108",
            "CSAFPID-221185",
            "CSAFPID-222435",
            "CSAFPID-222483",
            "CSAFPID-222695",
            "CSAFPID-222711",
            "CSAFPID-224840",
            "CSAFPID-225784",
            "CSAFPID-226158",
            "CSAFPID-226331",
            "CSAFPID-227555",
            "CSAFPID-227755",
            "CSAFPID-229124",
            "CSAFPID-231004",
            "CSAFPID-231187",
            "CSAFPID-231246",
            "CSAFPID-103559",
            "CSAFPID-103763",
            "CSAFPID-104376",
            "CSAFPID-105394",
            "CSAFPID-105660",
            "CSAFPID-105689",
            "CSAFPID-105987",
            "CSAFPID-106029",
            "CSAFPID-106674",
            "CSAFPID-107283",
            "CSAFPID-107852",
            "CSAFPID-108306",
            "CSAFPID-108462",
            "CSAFPID-109098",
            "CSAFPID-109439",
            "CSAFPID-109442",
            "CSAFPID-109594",
            "CSAFPID-109659",
            "CSAFPID-109760",
            "CSAFPID-109808",
            "CSAFPID-111010",
            "CSAFPID-111019",
            "CSAFPID-111031",
            "CSAFPID-111674",
            "CSAFPID-111884",
            "CSAFPID-113073",
            "CSAFPID-113948",
            "CSAFPID-113961",
            "CSAFPID-113966",
            "CSAFPID-114012",
            "CSAFPID-114665",
            "CSAFPID-115477",
            "CSAFPID-115832",
            "CSAFPID-115939",
            "CSAFPID-115969",
            "CSAFPID-115982",
            "CSAFPID-116083",
            "CSAFPID-116254",
            "CSAFPID-183811",
            "CSAFPID-184125",
            "CSAFPID-187057",
            "CSAFPID-187269",
            "CSAFPID-188035",
            "CSAFPID-189064",
            "CSAFPID-189115",
            "CSAFPID-189187",
            "CSAFPID-189455",
            "CSAFPID-190635",
            "CSAFPID-190637",
            "CSAFPID-191928",
            "CSAFPID-191948",
            "CSAFPID-192706",
            "CSAFPID-192910",
            "CSAFPID-192911",
            "CSAFPID-193283",
            "CSAFPID-194433",
            "CSAFPID-194540",
            "CSAFPID-194741",
            "CSAFPID-194913",
            "CSAFPID-195469",
            "CSAFPID-195489",
            "CSAFPID-195770",
            "CSAFPID-195943",
            "CSAFPID-197462",
            "CSAFPID-197465",
            "CSAFPID-197471",
            "CSAFPID-197483",
            "CSAFPID-198060",
            "CSAFPID-198063",
            "CSAFPID-198542",
            "CSAFPID-200488",
            "CSAFPID-200496",
            "CSAFPID-200503",
            "CSAFPID-201074",
            "CSAFPID-201366",
            "CSAFPID-204097",
            "CSAFPID-204102",
            "CSAFPID-204108",
            "CSAFPID-204186",
            "CSAFPID-204187",
            "CSAFPID-204228",
            "CSAFPID-204818",
            "CSAFPID-204831",
            "CSAFPID-205064",
            "CSAFPID-205672",
            "CSAFPID-209028",
            "CSAFPID-209029",
            "CSAFPID-209034",
            "CSAFPID-209045",
            "CSAFPID-209046",
            "CSAFPID-209047",
            "CSAFPID-209049",
            "CSAFPID-209050",
            "CSAFPID-209051",
            "CSAFPID-209358",
            "CSAFPID-209359",
            "CSAFPID-209839",
            "CSAFPID-209887",
            "CSAFPID-210203",
            "CSAFPID-210732",
            "CSAFPID-210766",
            "CSAFPID-210958",
            "CSAFPID-211296",
            "CSAFPID-211570",
            "CSAFPID-212329",
            "CSAFPID-213610",
            "CSAFPID-213788",
            "CSAFPID-214072",
            "CSAFPID-214078",
            "CSAFPID-214217",
            "CSAFPID-214218",
            "CSAFPID-214556",
            "CSAFPID-214797",
            "CSAFPID-214937",
            "CSAFPID-214965",
            "CSAFPID-214992",
            "CSAFPID-216295",
            "CSAFPID-217805",
            "CSAFPID-218891",
            "CSAFPID-218995",
            "CSAFPID-220038",
            "CSAFPID-220441",
            "CSAFPID-220457",
            "CSAFPID-220460",
            "CSAFPID-220461",
            "CSAFPID-220466",
            "CSAFPID-220507",
            "CSAFPID-220664",
            "CSAFPID-220689",
            "CSAFPID-221033",
            "CSAFPID-221137",
            "CSAFPID-222342",
            "CSAFPID-222419",
            "CSAFPID-222436",
            "CSAFPID-222500",
            "CSAFPID-222530",
            "CSAFPID-222924",
            "CSAFPID-223086",
            "CSAFPID-223143",
            "CSAFPID-224553",
            "CSAFPID-224868",
            "CSAFPID-225160",
            "CSAFPID-225740",
            "CSAFPID-226077",
            "CSAFPID-227598",
            "CSAFPID-227959",
            "CSAFPID-228057",
            "CSAFPID-228075",
            "CSAFPID-228151",
            "CSAFPID-230588",
            "CSAFPID-230589",
            "CSAFPID-230590",
            "CSAFPID-230591",
            "CSAFPID-230623",
            "CSAFPID-230965",
            "CSAFPID-230995",
            "CSAFPID-231245",
            "CSAFPID-241916",
            "CSAFPID-250628",
            "CSAFPID-274202",
            "CSAFPID-275845",
            "CSAFPID-277230",
            "CSAFPID-277232",
            "CSAFPID-277253",
            "CSAFPID-279335",
            "CSAFPID-279337",
            "CSAFPID-280759",
            "CSAFPID-282026",
            "CSAFPID-283833",
            "CSAFPID-284291",
            "CSAFPID-284341",
            "CSAFPID-284566",
            "CSAFPID-284785",
            "CSAFPID-286029",
            "CSAFPID-286399",
            "CSAFPID-286400",
            "CSAFPID-286451",
            "CSAFPID-286844",
            "CSAFPID-286927",
            "CSAFPID-286940",
            "CSAFPID-289270",
            "CSAFPID-289301",
            "CSAFPID-289371",
            "CSAFPID-290557",
            "CSAFPID-290618",
            "CSAFPID-300950"
          ],
          "url": "https://software.cisco.com"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-103559",
            "CSAFPID-103763",
            "CSAFPID-104376",
            "CSAFPID-105394",
            "CSAFPID-105660",
            "CSAFPID-105689",
            "CSAFPID-105987",
            "CSAFPID-106029",
            "CSAFPID-106674",
            "CSAFPID-107283",
            "CSAFPID-107852",
            "CSAFPID-108306",
            "CSAFPID-108462",
            "CSAFPID-109098",
            "CSAFPID-109439",
            "CSAFPID-109442",
            "CSAFPID-109594",
            "CSAFPID-109659",
            "CSAFPID-109760",
            "CSAFPID-109808",
            "CSAFPID-111010",
            "CSAFPID-111019",
            "CSAFPID-111031",
            "CSAFPID-111674",
            "CSAFPID-111884",
            "CSAFPID-113073",
            "CSAFPID-113948",
            "CSAFPID-113961",
            "CSAFPID-113966",
            "CSAFPID-114012",
            "CSAFPID-114665",
            "CSAFPID-115477",
            "CSAFPID-115832",
            "CSAFPID-115939",
            "CSAFPID-115969",
            "CSAFPID-115982",
            "CSAFPID-116083",
            "CSAFPID-116254",
            "CSAFPID-183811",
            "CSAFPID-184125",
            "CSAFPID-187057",
            "CSAFPID-187269",
            "CSAFPID-188035",
            "CSAFPID-189064",
            "CSAFPID-189115",
            "CSAFPID-189187",
            "CSAFPID-189455",
            "CSAFPID-190635",
            "CSAFPID-190637",
            "CSAFPID-191928",
            "CSAFPID-191948",
            "CSAFPID-192706",
            "CSAFPID-192910",
            "CSAFPID-192911",
            "CSAFPID-193283",
            "CSAFPID-194433",
            "CSAFPID-194540",
            "CSAFPID-194741",
            "CSAFPID-194913",
            "CSAFPID-195469",
            "CSAFPID-195489",
            "CSAFPID-195770",
            "CSAFPID-195943",
            "CSAFPID-197462",
            "CSAFPID-197465",
            "CSAFPID-197471",
            "CSAFPID-197483",
            "CSAFPID-198060",
            "CSAFPID-198063",
            "CSAFPID-198542",
            "CSAFPID-200488",
            "CSAFPID-200496",
            "CSAFPID-200503",
            "CSAFPID-201074",
            "CSAFPID-201366",
            "CSAFPID-204097",
            "CSAFPID-204102",
            "CSAFPID-204108",
            "CSAFPID-204186",
            "CSAFPID-204187",
            "CSAFPID-204228",
            "CSAFPID-204818",
            "CSAFPID-204831",
            "CSAFPID-205064",
            "CSAFPID-205672",
            "CSAFPID-209028",
            "CSAFPID-209029",
            "CSAFPID-209034",
            "CSAFPID-209045",
            "CSAFPID-209046",
            "CSAFPID-209047",
            "CSAFPID-209049",
            "CSAFPID-209050",
            "CSAFPID-209051",
            "CSAFPID-209358",
            "CSAFPID-209359",
            "CSAFPID-209839",
            "CSAFPID-209887",
            "CSAFPID-210203",
            "CSAFPID-210732",
            "CSAFPID-210766",
            "CSAFPID-210958",
            "CSAFPID-211296",
            "CSAFPID-211570",
            "CSAFPID-212329",
            "CSAFPID-213610",
            "CSAFPID-213788",
            "CSAFPID-214072",
            "CSAFPID-214078",
            "CSAFPID-214217",
            "CSAFPID-214218",
            "CSAFPID-214556",
            "CSAFPID-214797",
            "CSAFPID-214937",
            "CSAFPID-214965",
            "CSAFPID-214992",
            "CSAFPID-216295",
            "CSAFPID-217805",
            "CSAFPID-218891",
            "CSAFPID-218995",
            "CSAFPID-220038",
            "CSAFPID-220441",
            "CSAFPID-220457",
            "CSAFPID-220460",
            "CSAFPID-220461",
            "CSAFPID-220466",
            "CSAFPID-220507",
            "CSAFPID-220664",
            "CSAFPID-220689",
            "CSAFPID-221033",
            "CSAFPID-221137",
            "CSAFPID-222342",
            "CSAFPID-222419",
            "CSAFPID-222436",
            "CSAFPID-222500",
            "CSAFPID-222530",
            "CSAFPID-222924",
            "CSAFPID-223086",
            "CSAFPID-223143",
            "CSAFPID-224553",
            "CSAFPID-224868",
            "CSAFPID-225160",
            "CSAFPID-225740",
            "CSAFPID-226077",
            "CSAFPID-227598",
            "CSAFPID-227959",
            "CSAFPID-228057",
            "CSAFPID-228075",
            "CSAFPID-228151",
            "CSAFPID-230588",
            "CSAFPID-230589",
            "CSAFPID-230590",
            "CSAFPID-230591",
            "CSAFPID-230623",
            "CSAFPID-230965",
            "CSAFPID-230995",
            "CSAFPID-231245",
            "CSAFPID-241916",
            "CSAFPID-250628",
            "CSAFPID-274202",
            "CSAFPID-275845",
            "CSAFPID-277230",
            "CSAFPID-277232",
            "CSAFPID-277253",
            "CSAFPID-279335",
            "CSAFPID-279337",
            "CSAFPID-280759",
            "CSAFPID-282026",
            "CSAFPID-283833",
            "CSAFPID-284291",
            "CSAFPID-284341",
            "CSAFPID-284566",
            "CSAFPID-284785",
            "CSAFPID-286029",
            "CSAFPID-286399",
            "CSAFPID-286400",
            "CSAFPID-286451",
            "CSAFPID-286844",
            "CSAFPID-286927",
            "CSAFPID-286940",
            "CSAFPID-289270",
            "CSAFPID-289301",
            "CSAFPID-289371",
            "CSAFPID-290557",
            "CSAFPID-290618",
            "CSAFPID-300950",
            "CSAFPID-196216",
            "CSAFPID-196218",
            "CSAFPID-196221",
            "CSAFPID-196222",
            "CSAFPID-196223",
            "CSAFPID-196230",
            "CSAFPID-196231",
            "CSAFPID-196288",
            "CSAFPID-196925",
            "CSAFPID-197145",
            "CSAFPID-206165",
            "CSAFPID-206166",
            "CSAFPID-206167",
            "CSAFPID-206168",
            "CSAFPID-206169",
            "CSAFPID-206170",
            "CSAFPID-206172",
            "CSAFPID-206173",
            "CSAFPID-206200",
            "CSAFPID-206201",
            "CSAFPID-206202",
            "CSAFPID-206203",
            "CSAFPID-206211",
            "CSAFPID-210070",
            "CSAFPID-210074",
            "CSAFPID-210076",
            "CSAFPID-210077",
            "CSAFPID-212436",
            "CSAFPID-212674",
            "CSAFPID-213100",
            "CSAFPID-213785",
            "CSAFPID-213790",
            "CSAFPID-213797",
            "CSAFPID-213809",
            "CSAFPID-213811",
            "CSAFPID-213812",
            "CSAFPID-213960",
            "CSAFPID-214051",
            "CSAFPID-214993",
            "CSAFPID-217253",
            "CSAFPID-217255",
            "CSAFPID-217256",
            "CSAFPID-217259",
            "CSAFPID-217279",
            "CSAFPID-217280",
            "CSAFPID-217282",
            "CSAFPID-217283",
            "CSAFPID-218901",
            "CSAFPID-220290",
            "CSAFPID-220357",
            "CSAFPID-220489",
            "CSAFPID-220802",
            "CSAFPID-221108",
            "CSAFPID-221185",
            "CSAFPID-222435",
            "CSAFPID-222483",
            "CSAFPID-222695",
            "CSAFPID-222711",
            "CSAFPID-224840",
            "CSAFPID-225784",
            "CSAFPID-226158",
            "CSAFPID-226331",
            "CSAFPID-227555",
            "CSAFPID-227755",
            "CSAFPID-229124",
            "CSAFPID-231004",
            "CSAFPID-231187",
            "CSAFPID-231246"
          ]
        }
      ],
      "title": "Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Catalyst 4500 Supervisor Engine 6L-E (K10)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst 4900M Switch (K5)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS XE versions 16.x",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst 4500E Supervisor Engine 8-E (K10)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst 4500E Supervisor Engine 8L-E (K10)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst 4500 Supervisor Engine 6-E (K5)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco Catalyst 3850 et Cisco Catalyst 3650 ex\u00e9cutant Cisco IOS XE version 16.1.1 ou post\u00e9rieure",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco ISM-VPN install\u00e9 sur une version vuln\u00e9rable de Cisco IOS",
      "product": {
        "name": "IOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS ou Cisco IOS XE avec le protocole Internet Security Association and Key Management Protocol (ISAKMP) activ\u00e9",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco Catalyst Digital Building Series Switches \u2013 8U",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco Catalyst 2960-L Series Switches",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco Catalyst Digital Building Series Switches \u2013 8P",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS XE utilisant la fonctionnalit\u00e9 Zone-Based Policy Firewall et ex\u00e9cutant une des versions Everest-16.4.1, Everest-16.4.2, Everest-16.5.1, Everest-16.5.1b, Everest-16.6.1, Everest-16.6.1a",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst 4500 Supervisor Engine 7L-E (K10)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS, Cisco IOS XE ou Cisco IOS XR configur\u00e9s pour utiliser LLDP",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst 4500-X Series Switches (K10)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS ou IOS XE",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst 4500 Supervisor Engine 7-E (K10)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst 4500E Supervisor Engine 9-E (K10)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst 4948E Ethernet Switch (K5)",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Cisco IOS ou IOS XE avec la fonctionnalit\u00e9 Smart Install client activ\u00e9e",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-0171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0171"
    },
    {
      "name": "CVE-2018-0157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0157"
    },
    {
      "name": "CVE-2018-0174",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0174"
    },
    {
      "name": "CVE-2018-0158",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0158"
    },
    {
      "name": "CVE-2018-0167",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0167"
    },
    {
      "name": "CVE-2018-0169",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0169"
    },
    {
      "name": "CVE-2018-0165",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0165"
    },
    {
      "name": "CVE-2018-0151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0151"
    },
    {
      "name": "CVE-2018-0176",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0176"
    },
    {
      "name": "CVE-2018-0154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0154"
    },
    {
      "name": "CVE-2018-0172",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0172"
    },
    {
      "name": "CVE-2018-0150",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0150"
    },
    {
      "name": "CVE-2018-0170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0170"
    },
    {
      "name": "CVE-2018-0160",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0160"
    },
    {
      "name": "CVE-2018-0159",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0159"
    },
    {
      "name": "CVE-2018-0156",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0156"
    },
    {
      "name": "CVE-2018-0161",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0161"
    },
    {
      "name": "CVE-2018-0152",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0152"
    },
    {
      "name": "CVE-2018-0173",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0173"
    },
    {
      "name": "CVE-2018-0177",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0177"
    },
    {
      "name": "CVE-2018-0175",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0175"
    },
    {
      "name": "CVE-2018-0155",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0155"
    }
  ],
  "initial_release_date": "2018-03-29T00:00:00",
  "last_revision_date": "2018-03-29T00:00:00",
  "links": [],
  "reference": "CERTFR-2018-AVI-156",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-03-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco.\nCertaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une\nex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance\net un contournement de la politique de s\u00e9curit\u00e9.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-lldp du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-dhcpr2 du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr2"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-snmp du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-fwip du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-fwip"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-dos du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dos"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-bfd du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-bfd"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-opendns-dos du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-opendns-dos"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-privesc1 du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-privesc1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-igmp du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-igmp"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-ike du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-dhcpr3 du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-qos du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-qos"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-xepriv du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-xepriv"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-ipv4 du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ipv4"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-snmp-dos du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-snmp-dos"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-xesc du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-xesc"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-smi2 du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-ike-dos du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-ike-dos"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-dhcpr1 du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr1"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-20180328-smi du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Cisco IOS et IOS XE utilisant la fonctionnalit\u00e9 Smart Install",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "closed_at": "2018-07-30",
  "content": "## Solution\n\nLe CERT-FR recommande l\u0027installation de la mise \u00e0 jour fournie par Cisco\ndans les plus brefs d\u00e9lais.\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2018-0171",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-0171"
    }
  ],
  "initial_release_date": "2018-04-06T00:00:00",
  "last_revision_date": "2018-07-30T00:00:00",
  "links": [
    {
      "title": "Outil permettant de v\u00e9rifier si un \u00e9quipement est vuln\u00e9rable \u00e0 la CVE-2018-0171",
      "url": "https://github.com/Cisco-Talos/smi_check"
    },
    {
      "title": "Documentation Cisco sur la fonctionnalit\u00e9 Smart Install",
      "url": "https://www.cisco.com/c/en/us/td/docs/switches/lan/smart_install/configuration/guide/smart_install/concepts.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco d\u0027information\u00a0cisco-sa-20180409-smi du 9 avril 2018 sur la s\u00e9curisation de Smart Install",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180409-smi"
    },
    {
      "title": "Avis CERT-FR CERTFR-2018-AVI-156 Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
      "url": "http://www.cert.ssi.gouv.fr/avis/CERTFR-2018-AVI-156"
    },
    {
      "title": "Publication de blogue Cisco Talos du 27 f\u00e9vrier 2018 relatif \u00e0 Smart Install Client",
      "url": "http://blog.talosintelligence.com/2017/02/cisco-coverage-for-smart-install-client.html"
    },
    {
      "title": "Publication de blogue Embedi du 29 mars 2018 d\u00e9taillant les principes de la vuln\u00e9rabilit\u00e9 CVE-2018-0171",
      "url": "https://embedi.com/blog/cisco-smart-install-remote-code-execution/"
    },
    {
      "title": "Publication de blogue Cisco du 27 f\u00e9vrier 2018 relatif \u00e0 Smart Install Client",
      "url": "https://blogs.cisco.com/security/cisco-psirt-mitigating-and-detecting-potential-abuse-of-cisco-smart-install-feature"
    }
  ],
  "reference": "CERTFR-2018-ALE-006",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2018-04-06T00:00:00.000000"
    },
    {
      "description": "Ajout d\u0027un bulletin Cisco sur les moyens \u00e0 mettre en \u0153uvre pour s\u00e9curiser Smart Install",
      "revision_date": "2018-04-10T00:00:00.000000"
    },
    {
      "description": "Cl\u00f4ture de l\u0027alerte",
      "revision_date": "2018-07-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Le 28 mars 2018, Cisco a publi\u00e9 une mise \u00e0 jour de s\u00e9curit\u00e9 pour ses\nlogiciels IOS et IOS XE b\u00e9n\u00e9ficiant de la fonctionnalit\u00e9 *Smart\nInstall*. Ce correctif concerne une faille de s\u00e9curit\u00e9 pouvant conduire\n\u00e0 une ex\u00e9cution de code arbitraire \u00e0 distance sur un \u00e9quipement mettant\nen \u0153uvre un client *Smart Install*.  \nLe 5 avril 2018, le blogue de Cisco Talos alerte sur la forte\nprobabilit\u00e9 d\u0027exploitation de cette vuln\u00e9rabilit\u00e9 au regard de\nl\u0027existence d\u0027une preuve de concept et d\u0027une recrudescence anormale du\ntraffic internet vers les services *Smart Install*.\n\nCette technologie a \u00e9t\u00e9 d\u00e9velopp\u00e9e afin de permettre le d\u00e9ploiement et\nla configuration automatique d\u0027un commutateur selon un principe \"pr\u00eat \u00e0\nl\u0027emploi\" (*plug and play*). Lors de la mise en service d\u0027un appareil,\nce dernier pourra ainsi r\u00e9cup\u00e9rer sa configuration aupr\u00e8s d\u0027un directeur\n*Smart Install*. Le r\u00f4le de directeur est tenu par un \u00e9quipement r\u00e9seau\nde niveau 3 qui d\u00e9livre une image et une configuration \u00e0 d\u00e9ployer aux\ndiff\u00e9rents produits ex\u00e9cutant le client *Smart Install* et venant\nl\u0027interroger.\n\nLa vuln\u00e9rabilit\u00e9 corrig\u00e9e par Cisco, identifi\u00e9e en tant que\nCVE-2018-0171, touche la partie cliente de *Smart Install*. Un\ncommutateur configur\u00e9 pour utiliser *Smart Install* d\u00e9marre un serveur\nen \u00e9coute sur le port 4786 en TCP. Un paquet de type\n\u003cstrong\u003eibd_init_discovery_msg\u003c/strong\u003e sp\u00e9cifiquement forg\u00e9 et transmis au client\npeut alors causer un d\u00e9passement de tampon sur la pile et conduire \u00e0 la\ncompromission de l\u0027\u00e9quipement.\n\nLe CERT-FR recommande la mise en \u0153uvre des actions suivantes afin de\nd\u00e9tecter tout appareil vuln\u00e9rable pr\u00e9sent au sein du r\u00e9seau.\n\n-   V\u00e9rifier dans le r\u00e9seau si des ports TCP 4786 sont actifs. Cela peut\n    \u00eatre r\u00e9alis\u00e9 \u00e0 l\u0027aide d\u0027un outil de scan de type Nmap.\n-   Contr\u00f4ler l\u0027\u00e9tat des interfaces r\u00e9seau au niveau d\u0027un \u00e9quipement en\n    utilisant la commande \u003cstrong\u003eshow tcp brief all\u003c/strong\u003e et identifier si le\n    port 4786 est en \u00e9coute.\n-   V\u00e9rifier si la fonctionnalit\u00e9 *Smart Install* est active avec le\n    r\u00f4le de client en ex\u00e9cutant la commande \u003cstrong\u003eshow vstack config\u003c/strong\u003e.\n-   Identifier si la version du logiciel IOS ex\u00e9cut\u00e9e par l\u0027\u00e9quipement\n    est vuln\u00e9rable avec la commande \u003cstrong\u003eshow version\u003c/strong\u003e. Se r\u00e9f\u00e9rer au\n    bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour obtenir une liste des\n    versions concern\u00e9es par la vuln\u00e9rabilit\u00e9\n-   Un script mis \u00e0 disposition par Cisco permet \u00e9galement de scanner un\n    appareil pour identifier s\u0027il est vuln\u00e9rable (cf. section\n    Documentation).\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Cisco IOS et IOS XE Smart Install Client",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco du 28 mars 2018",
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"
    }
  ]
}

{
  "cisaActionDue": "2022-05-03",
  "cisaExploitAdd": "2021-11-03",
  "cisaRequiredAction": "Apply updates per vendor instructions.",
  "cisaVulnerabilityName": "Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability",
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(5\\)e:*:*:*:*:*:*:*",
              "matchCriteriaId": "F112DE64-0042-4FB9-945D-3107468193E5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device, which could have the following impacts: Triggering a reload of the device, Allowing the attacker to execute arbitrary code on the device, Causing an indefinite loop on the affected device that triggers a watchdog crash. Cisco Bug IDs: CSCvg76186."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en la caracter\u00edstica Smart Install de Cisco IOS Software y Cisco IOS XE Software podr\u00eda permitir que un atacante remoto no autenticado desencadene la recarga de un dispositivo afectado. Esto resulta en una condici\u00f3n de denegaci\u00f3n de servicio (DoS) o en la ejecuci\u00f3n de c\u00f3digo arbitrario en un dispositivo afectado. Esta vulnerabilidad se debe a la validaci\u00f3n incorrecta de datos del paquete. Un atacante podr\u00eda explotar esta vulnerabilidad enviando un mensaje Smart Install manipulado al dispositivo afectado en el puerto TCP 4786. Su explotaci\u00f3n con \u00e9xito podr\u00eda permitir que el atacante provoque un desbordamiento de b\u00fafer en el dispositivo afectado, lo que podr\u00eda provocar los siguientes impactos: Desencadenar la recarga del dispositivo, permitir que el atacante ejecute c\u00f3digo arbitrario en el dispositivo, provocar un bucle impreciso en el dispositivo afectado que desencadene un cierre inesperado del watchdog. Cisco Bug IDs: CSCvg76186."
    }
  ],
  "id": "CVE-2018-0171",
  "lastModified": "2025-10-28T13:54:17.953",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": true,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2018-03-28T22:29:01.063",
  "references": [
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/103538"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1040580"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Press/Media Coverage"
      ],
      "url": "https://www.darkreading.com/perimeter/attackers-exploit-cisco-switch-issue-as-vendor-warns-of-yet-another-critical-flaw/d/d-id/1331490"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/103538"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1040580"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Press/Media Coverage"
      ],
      "url": "https://www.darkreading.com/perimeter/attackers-exploit-cisco-switch-issue-as-vendor-warns-of-yet-another-critical-flaw/d/d-id/1331490"
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "tags": [
        "US Government Resource"
      ],
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0171"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "psirt@cisco.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "organization": "Rockwell Automation",
        "summary": "reporting these vulnerabilities to NCCIC from the semi-annual Cisco IOS and IOS XE Software Security Advisory Bundled Publication"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of these vulnerabilities could result in loss of availability, confidentiality, and/or integrity caused by memory exhaustion, module restart, information corruption, and/or information exposure.",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Critical Manufacturing, Energy, Water and Wastewater Systems",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Wisconsin, USA",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS-CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT website.",
        "title": "Recommended Practices"
      },
      {
        "category": "other",
        "text": "No known public exploits specifically target these vulnerabilities.",
        "title": "Exploitability"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-18-107-04 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2018/icsa-18-107-04.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-18-107-04 Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-18-107-04"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-18-107-04"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      }
    ],
    "title": "Rockwell Automation Stratix and ArmorStratix Switches",
    "tracking": {
      "current_release_date": "2018-04-17T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-18-107-04",
      "initial_release_date": "2018-04-17T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2018-04-17T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSA-18-107-04 Rockwell Automation Stratix and ArmorStratix Switches"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c= 15.2(6)E0a",
                "product": {
                  "name": "Allen-Bradley Stratix 5400 Industrial Ethernet Switches: versions 15.2(6)E0a and earlier;",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "Allen-Bradley Stratix 5400 Industrial Ethernet Switches"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c= 15.2(6)E0a",
                "product": {
                  "name": "Allen-Bradley Stratix 8000 Modular Managed Ethernet Switches: versions 15.2(6)E0a and earlier;",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "Allen-Bradley Stratix 8000 Modular Managed Ethernet Switches"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c= 15.2(6)E0a",
                "product": {
                  "name": "Allen-Bradley Stratix 5410 Industrial Distribution Switches: versions 15.2(6)E0a and earlier;",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "Allen-Bradley Stratix 5410 Industrial Distribution Switches"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c= 15.2(6)E0a",
                "product": {
                  "name": "Allen-Bradley Stratix 5700 Industrial Managed Ethernet Switches: versions 15.2(6)E0a and earlier;",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "Allen-Bradley Stratix 5700 Industrial Managed Ethernet Switches"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c= 15.2(6)E0a",
                "product": {
                  "name": "Allen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments: versions 15.2(6)E0a and earlier",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "Allen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments"
          }
        ],
        "category": "vendor",
        "name": "Rockwell Automation"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-0171",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device.CVE-2018-0171 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0171"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0171 - Snort Rule 46096 and 46097",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Cisco adds the following notes for the Smart Install vulnerabilities (CVE-2018-0171 and CVE-2018-0156): Smart Install is turned off by express setup; however, upgraded switches but not re-setup may have it enabled. Disable the Smart Install feature with the no vstack configuration command if it is not needed or once setup is complete. Users who do use the feature\u2014and need to leave it enabled\u2014can use ACLs to block incoming traffic on TCP port 4786.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0156",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated remote attacker to trigger a reload of an affected device, resulting in a DoS condition. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted packet to an affected device on TCP port 4786.CVE-2018-0156 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0156"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0156 - Snort Rule 41725",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Cisco adds the following notes for the Smart Install vulnerabilities (CVE-2018-0171 and CVE-2018-0156): Smart Install is turned off by express setup; however, upgraded switches but not re-setup may have it enabled. Disable the Smart Install feature with the no vstack configuration command if it is not needed or once setup is complete. Users who do use the feature\u2014and need to leave it enabled\u2014can use ACLs to block incoming traffic on TCP port 4786.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0174",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated remote attacker to cause an affected device to reload, resulting in a DoS condition. The vulnerability exists because the affected software performs incomplete input validation of option 82 information that it receives in DHCP Version 4 (DHCPv4) packets from DHCP relay agents. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.CVE-2018-0174 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0174"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0174 - Snort Rule 46120",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0172",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated remote attacker to cause an affected device to reload, resulting in a DoS condition. The vulnerability exists because the affected software performs incomplete input validation of option 82 information that it receives in DHCP Version 4 (DHCPv4) packets from DHCP relay agents. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device. A successful exploit could allow the attacker to cause a heap overflow condition on the affected device, which will cause the device to reload and result in a DoS condition.CVE-2018-0172 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0172"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0172 - Snort Rule 46104",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0173",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unauthenticated remote attacker to cause an affected device to reload, resulting in a DoS condition. The vulnerability exists because the affected software performs incomplete input validation of encapsulated option 82 information that it receives in DHCPOFFER messages from DHCPv4 servers. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device, which the device would then forward to a DHCPv4 server. When the affected software processes the option 82 information that is encapsulated in the response from the server, an error could occur. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.CVE-2018-0173 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0173"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0173 - Snort Rule 46119",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0158",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated remote attacker to cause a memory leak or a reload of an affected device that leads to a DoS condition. The vulnerability is due to incorrect processing of certain IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device to be processed. A successful exploit could cause an affected device to continuously consume memory and eventually reload, resulting in a DoS condition.CVE-2018-0158 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0158"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0158 - Snort Rule 46110",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0167",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A buffer overflow vulnerability in the LLDP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an adjacent, unauthenticated attacker to cause a DoS condition or execute arbitrary code with elevated privileges.CVE-2018-0167 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0167"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0167 and CVE-2018-0175: have no specific mitigations in place. See the following Cisco Vulnerability advisory for more details",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp"
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0175",
      "cwe": {
        "id": "CWE-134",
        "name": "Use of Externally-Controlled Format String"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A format string vulnerability in the LLDP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an adjacent, unauthenticated attacker to cause a DoS condition or execute arbitrary code with elevated privileges.CVE-2018-0175 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0175"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0167 and CVE-2018-0175: have no specific mitigations in place. See the following Cisco Vulnerability advisory for more details",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp"
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "organization": "Rockwell Automation",
        "summary": "reporting these vulnerabilities to NCCIC from the semi-annual Cisco IOS and IOS XE Software Security Advisory Bundled Publication"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://us-cert.cisa.gov/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov",
        "title": "CISA Disclaimer"
      },
      {
        "category": "legal_disclaimer",
        "text": "All information products included in https://us-cert.cisa.gov/ics are provided \"as is\" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained within. DHS does not endorse any commercial product or service, referenced in this product or otherwise. Further dissemination of this product is governed by the Traffic Light Protocol (TLP) marking in the header. For more information about TLP, see https://us-cert.cisa.gov/tlp/.",
        "title": "Legal Notice"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of these vulnerabilities could result in loss of availability, confidentiality, and/or integrity caused by memory exhaustion, module restart, information corruption, and/or information exposure.",
        "title": "Risk evaluation"
      },
      {
        "category": "other",
        "text": "Critical Manufacturing, Energy, Water and Wastewater Systems",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Wisconsin, USA",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "NCCIC reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "NCCIC also provides a section for control systems security recommended practices on the ICS-CERT web page. Several recommended practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing any suspected malicious activity should follow their established internal procedures and report their findings to NCCIC for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available in the ICS-CERT Technical Information Paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies, that is available for download from the ICS-CERT website.",
        "title": "Recommended Practices"
      },
      {
        "category": "other",
        "text": "No known public exploits specifically target these vulnerabilities.",
        "title": "Exploitability"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "Email: CISAservicedesk@cisa.dhs.gov;\n Toll Free: 1-888-282-0870",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-18-107-04 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2018/icsa-18-107-04.json"
      },
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-18-107-04 Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-18-107-04"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-18-107-04"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      }
    ],
    "title": "Rockwell Automation Stratix and ArmorStratix Switches",
    "tracking": {
      "current_release_date": "2018-04-17T00:00:00.000000Z",
      "generator": {
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-18-107-04",
      "initial_release_date": "2018-04-17T00:00:00.000000Z",
      "revision_history": [
        {
          "date": "2018-04-17T00:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "ICSA-18-107-04 Rockwell Automation Stratix and ArmorStratix Switches"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c= 15.2(6)E0a",
                "product": {
                  "name": "Allen-Bradley Stratix 5400 Industrial Ethernet Switches: versions 15.2(6)E0a and earlier;",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "Allen-Bradley Stratix 5400 Industrial Ethernet Switches"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c= 15.2(6)E0a",
                "product": {
                  "name": "Allen-Bradley Stratix 8000 Modular Managed Ethernet Switches: versions 15.2(6)E0a and earlier;",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "Allen-Bradley Stratix 8000 Modular Managed Ethernet Switches"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c= 15.2(6)E0a",
                "product": {
                  "name": "Allen-Bradley Stratix 5410 Industrial Distribution Switches: versions 15.2(6)E0a and earlier;",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "Allen-Bradley Stratix 5410 Industrial Distribution Switches"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c= 15.2(6)E0a",
                "product": {
                  "name": "Allen-Bradley Stratix 5700 Industrial Managed Ethernet Switches: versions 15.2(6)E0a and earlier;",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "Allen-Bradley Stratix 5700 Industrial Managed Ethernet Switches"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c= 15.2(6)E0a",
                "product": {
                  "name": "Allen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments: versions 15.2(6)E0a and earlier",
                  "product_id": "CSAFPID-0005"
                }
              }
            ],
            "category": "product_name",
            "name": "Allen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches for extreme environments"
          }
        ],
        "category": "vendor",
        "name": "Rockwell Automation"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2018-0171",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition, or to execute arbitrary code on an affected device. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted Smart Install message to an affected device on TCP port 4786. A successful exploit could allow the attacker to cause a buffer overflow on the affected device.CVE-2018-0171 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0171"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0171 - Snort Rule 46096 and 46097",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Cisco adds the following notes for the Smart Install vulnerabilities (CVE-2018-0171 and CVE-2018-0156): Smart Install is turned off by express setup; however, upgraded switches but not re-setup may have it enabled. Disable the Smart Install feature with the no vstack configuration command if it is not needed or once setup is complete. Users who do use the feature\u2014and need to leave it enabled\u2014can use ACLs to block incoming traffic on TCP port 4786.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0156",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated remote attacker to trigger a reload of an affected device, resulting in a DoS condition. The vulnerability is due to improper validation of packet data. An attacker could exploit this vulnerability by sending a crafted packet to an affected device on TCP port 4786.CVE-2018-0156 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0156"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0156 - Snort Rule 41725",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Cisco adds the following notes for the Smart Install vulnerabilities (CVE-2018-0171 and CVE-2018-0156): Smart Install is turned off by express setup; however, upgraded switches but not re-setup may have it enabled. Disable the Smart Install feature with the no vstack configuration command if it is not needed or once setup is complete. Users who do use the feature\u2014and need to leave it enabled\u2014can use ACLs to block incoming traffic on TCP port 4786.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0174",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated remote attacker to cause an affected device to reload, resulting in a DoS condition. The vulnerability exists because the affected software performs incomplete input validation of option 82 information that it receives in DHCP Version 4 (DHCPv4) packets from DHCP relay agents. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.CVE-2018-0174 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0174"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0174 - Snort Rule 46120",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0172",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated remote attacker to cause an affected device to reload, resulting in a DoS condition. The vulnerability exists because the affected software performs incomplete input validation of option 82 information that it receives in DHCP Version 4 (DHCPv4) packets from DHCP relay agents. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device. A successful exploit could allow the attacker to cause a heap overflow condition on the affected device, which will cause the device to reload and result in a DoS condition.CVE-2018-0172 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0172"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0172 - Snort Rule 46104",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0173",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unauthenticated remote attacker to cause an affected device to reload, resulting in a DoS condition. The vulnerability exists because the affected software performs incomplete input validation of encapsulated option 82 information that it receives in DHCPOFFER messages from DHCPv4 servers. An attacker could exploit this vulnerability by sending a crafted DHCPv4 packet to an affected device, which the device would then forward to a DHCPv4 server. When the affected software processes the option 82 information that is encapsulated in the response from the server, an error could occur. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.CVE-2018-0173 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0173"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0173 - Snort Rule 46119",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0158",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated remote attacker to cause a memory leak or a reload of an affected device that leads to a DoS condition. The vulnerability is due to incorrect processing of certain IKEv2 packets. An attacker could exploit this vulnerability by sending crafted IKEv2 packets to an affected device to be processed. A successful exploit could cause an affected device to continuously consume memory and eventually reload, resulting in a DoS condition.CVE-2018-0158 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0158"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0158 - Snort Rule 46110",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0167",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A buffer overflow vulnerability in the LLDP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an adjacent, unauthenticated attacker to cause a DoS condition or execute arbitrary code with elevated privileges.CVE-2018-0167 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0167"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0167 and CVE-2018-0175: have no specific mitigations in place. See the following Cisco Vulnerability advisory for more details",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp"
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2018-0175",
      "cwe": {
        "id": "CWE-134",
        "name": "Use of Externally-Controlled Format String"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A format string vulnerability in the LLDP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an adjacent, unauthenticated attacker to cause a DoS condition or execute arbitrary code with elevated privileges.CVE-2018-0175 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been calculated; the CVSS vector string is (AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).",
          "title": "Vulnerability Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0005"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "web.nvd.nist.gov",
          "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-0175"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Rockwell Automation recommends users upgrade to FRN 15.2(6)E1 or later. ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=15"
        },
        {
          "category": "mitigation",
          "details": "Rockwell Automation has provided knowledge base article number 1073268 on their website ",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://rockwellautomation.custhelp.com/app/answers/detail/a_id/1073268/"
        },
        {
          "category": "mitigation",
          "details": "Cisco has released new Snort Rules at https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.htm",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://www.cisco.com/web/software/286271056/117258/sf-rules-2018-03-29-new.html"
        },
        {
          "category": "mitigation",
          "details": "CVE-2018-0167 and CVE-2018-0175: have no specific mitigations in place. See the following Cisco Vulnerability advisory for more details",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp"
        },
        {
          "category": "mitigation",
          "details": "Help minimize network exposure for all control system devices and/or systems, and confirm that they are not accessible from the Internet.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "Locate control system networks and devices behind firewalls, and isolate them from the business network.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        },
        {
          "category": "mitigation",
          "details": "When remote access is required, use secure methods, such as Virtual Private Networks (VPNs), recognizing that VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize that VPN is only as secure as the connected devices.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004",
            "CSAFPID-0005"
          ]
        }
      ]
    }
  ]
}

{
  "bids": {
    "bid": {
      "bidNumber": "103538"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0171"
    }
  },
  "description": "Smart Install\u4f5c\u4e3a\u4e00\u9879\u5373\u63d2\u5373\u7528\u914d\u7f6e\u548c\u955c\u50cf\u7ba1\u7406\u529f\u80fd\uff0c\u4e3a\u65b0\u52a0\u5165\u7f51\u7edc\u7684\u4ea4\u6362\u673a\u63d0\u4f9b\u96f6\u914d\u7f6e\u90e8\u7f72\uff0c\u5b9e\u73b0\u4e86\u81ea\u52a8\u5316\u521d\u59cb\u914d\u7f6e\u548c\u64cd\u4f5c\u7cfb\u7edf\u955c\u50cf\u52a0\u8f7d\u7684\u8fc7\u7a0b\uff0c\u540c\u65f6\u8fd8\u63d0\u4f9b\u914d\u7f6e\u6587\u4ef6\u7684\u5907\u4efd\u529f\u80fd\u3002\r\n\r\nCisco Smart Install\u5b58\u5728\u8fdc\u7a0b\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u65e0\u9700\u7528\u6237\u9a8c\u8bc1\u5373\u53ef\u5411\u8fdc\u7aefCisco\u8bbe\u5907\u7684TCP 4786\u7aef\u53e3\u53d1\u9001\u7cbe\u5fc3\u6784\u9020\u7684\u6076\u610f\u6570\u636e\u5305\uff0c\u89e6\u53d1\u6f0f\u6d1e\u9020\u6210\u8bbe\u5907\u8fdc\u7a0b\u6267\u884cCisco\u7cfb\u7edf\u547d\u4ee4\u6216\u62d2\u7edd\u670d\u52a1\uff08DoS\uff09\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-06774",
  "openTime": "2018-03-30",
  "patchDescription": "Smart Install\u4f5c\u4e3a\u4e00\u9879\u5373\u63d2\u5373\u7528\u914d\u7f6e\u548c\u955c\u50cf\u7ba1\u7406\u529f\u80fd\uff0c\u4e3a\u65b0\u52a0\u5165\u7f51\u7edc\u7684\u4ea4\u6362\u673a\u63d0\u4f9b\u96f6\u914d\u7f6e\u90e8\u7f72\uff0c\u5b9e\u73b0\u4e86\u81ea\u52a8\u5316\u521d\u59cb\u914d\u7f6e\u548c\u64cd\u4f5c\u7cfb\u7edf\u955c\u50cf\u52a0\u8f7d\u7684\u8fc7\u7a0b\uff0c\u540c\u65f6\u8fd8\u63d0\u4f9b\u914d\u7f6e\u6587\u4ef6\u7684\u5907\u4efd\u529f\u80fd\u3002\r\n\r\nCisco Smart Install\u5b58\u5728\u8fdc\u7a0b\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u65e0\u9700\u7528\u6237\u9a8c\u8bc1\u5373\u53ef\u5411\u8fdc\u7aefCisco\u8bbe\u5907\u7684TCP 4786\u7aef\u53e3\u53d1\u9001\u7cbe\u5fc3\u6784\u9020\u7684\u6076\u610f\u6570\u636e\u5305\uff0c\u89e6\u53d1\u6f0f\u6d1e\u9020\u6210\u8bbe\u5907\u8fdc\u7a0b\u6267\u884cCisco\u7cfb\u7edf\u547d\u4ee4\u6216\u62d2\u7edd\u670d\u52a1\uff08DoS\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Smart Install\u8fdc\u7a0b\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco IOS XE",
      "Cisco IOS"
    ]
  },
  "referenceLink": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2",
  "serverity": "\u9ad8",
  "submitTime": "2018-03-29",
  "title": "Cisco Smart Install\u8fdc\u7a0b\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e"
}