CVE-2018-0156VulnerabilityPublished 03/03/2022Updated 10/24/2026

CVE-2018-0156: Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability

Affects Cisco IOS Software and Cisco IOS XE SoftwareSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/03/2022
KEV deadline: 03/17/2022
EPSS: 9.4% chance of exploitation in 30 days – higher than 95% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2018-0156 (opens in a new tab)

Description

CVE-2018-0156 is a vulnerability in the Smart Install feature of Cisco IOS and IOS XE Software that allows an unauthenticated remote attacker to cause a device reload, resulting in a denial-of-service (DoS) condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

Summary

The vulnerability CVE-2018-0156 affects the Smart Install feature in Cisco IOS and Cisco IOS XE Software. An unauthenticated remote attacker can exploit this flaw to trigger a device reload, causing a denial-of-service condition. The vulnerability has been observed in active exploitation scenarios. No patch or remediation details are included in the provided information.

Impact

Successful exploitation results in a denial-of-service condition by forcing the affected Cisco device to reload, disrupting network availability. The vulnerability can be exploited remotely without authentication. It has been confirmed to be exploited in the wild, indicating active threat presence.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is confirmed, consider disabling the Smart Install feature if not required, or apply any recommended workarounds from Cisco advisories.

Weaknesses

CWE-399Unclassified weakness (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:40:43 UTC

Weaknesses

References

Related threats