{"schema":"vulnpedia.research/1","cve":"CVE-2018-0171","references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"],"source":"mitre","sourceId":"cisco","modified":"2018-04-19T13:57:01.000Z","origins":[{"source":"mitre","sourceId":"cisco","modified":"2018-04-19T13:57:01.000Z","url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-05T03:14:16.905Z","url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04"},{"source":"nvd","sourceId":"CVE-2018-0171","modified":"2026-06-17T01:29:59.627","url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04"}]},{"url":"http://www.securitytracker.com/id/1040580","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"],"source":"mitre","sourceId":"cisco","modified":"2018-04-19T13:57:01.000Z","origins":[{"source":"mitre","sourceId":"cisco","modified":"2018-04-19T13:57:01.000Z","url":"http://www.securitytracker.com/id/1040580"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-05T03:14:16.905Z","url":"http://www.securitytracker.com/id/1040580"},{"source":"nvd","sourceId":"CVE-2018-0171","modified":"2026-06-17T01:29:59.627","url":"http://www.securitytracker.com/id/1040580"}]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"],"source":"mitre","sourceId":"cisco","modified":"2018-04-19T13:57:01.000Z","origins":[{"source":"mitre","sourceId":"cisco","modified":"2018-04-19T13:57:01.000Z","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-05T03:14:16.905Z","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"},{"source":"nvd","sourceId":"CVE-2018-0171","modified":"2026-06-17T01:29:59.627","url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"}]},{"url":"https://www.darkreading.com/perimeter/attackers-exploit-cisco-switch-issue-as-vendor-warns-of-yet-another-critical-flaw/d/d-id/1331490","tags":["x_refsource_MISC","x_transferred","Press/Media Coverage"],"source":"mitre","sourceId":"cisco","modified":"2018-04-19T13:57:01.000Z","origins":[{"source":"mitre","sourceId":"cisco","modified":"2018-04-19T13:57:01.000Z","url":"https://www.darkreading.com/perimeter/attackers-exploit-cisco-switch-issue-as-vendor-warns-of-yet-another-critical-flaw/d/d-id/1331490"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-05T03:14:16.905Z","url":"https://www.darkreading.com/perimeter/attackers-exploit-cisco-switch-issue-as-vendor-warns-of-yet-another-critical-flaw/d/d-id/1331490"},{"source":"nvd","sourceId":"CVE-2018-0171","modified":"2026-06-17T01:29:59.627","url":"https://www.darkreading.com/perimeter/attackers-exploit-cisco-switch-issue-as-vendor-warns-of-yet-another-critical-flaw/d/d-id/1331490"}]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource"],"source":"mitre","sourceId":"cisco","modified":"2018-04-19T13:57:01.000Z","origins":[{"source":"mitre","sourceId":"cisco","modified":"2018-04-19T13:57:01.000Z","url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-05T03:14:16.905Z","url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05"},{"source":"nvd","sourceId":"CVE-2018-0171","modified":"2026-06-17T01:29:59.627","url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05"}]},{"url":"http://www.securityfocus.com/bid/103538","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"],"source":"mitre","sourceId":"cisco","modified":"2018-04-19T13:57:01.000Z","origins":[{"source":"mitre","sourceId":"cisco","modified":"2018-04-19T13:57:01.000Z","url":"http://www.securityfocus.com/bid/103538"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-05T03:14:16.905Z","url":"http://www.securityfocus.com/bid/103538"},{"source":"nvd","sourceId":"CVE-2018-0171","modified":"2026-06-17T01:29:59.627","url":"http://www.securityfocus.com/bid/103538"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0171","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-01-12T21:34:43.255Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-01-12T21:34:43.255Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0171"},{"source":"nvd","sourceId":"CVE-2018-0171","modified":"2026-06-17T01:29:59.627","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0171"}]},{"source":"euvd","sourceId":"EUVD-2018-0994","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0994","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2018-0994","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0994"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://cisa.gov/news-events/alerts/2022/04/27/2021-top-routinely-exploited-vulnerabilities","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://cisa.gov/news-events/alerts/2022/04/27/2021-top-routinely-exploited-vulnerabilities"}]},{"url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-117a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-117a"}]},{"url":"https://www.cisa.gov/uscert/ncas/alerts/aa22-158a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://www.cisa.gov/uscert/ncas/alerts/aa22-158a"}]},{"url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-158a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-158a"}]},{"url":"https://securityaffairs.co/wordpress/139821/security/cisco-old-vulnerabilities-exploitation.html","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://securityaffairs.co/wordpress/139821/security/cisco-old-vulnerabilities-exploitation.html"}]},{"url":"https://blog.talosintelligence.com/salt-typhoon-analysis/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://blog.talosintelligence.com/salt-typhoon-analysis/"}]},{"url":"https://www.greynoise.io/blog/greynoise-observes-active-exploitation-of-cisco-vulnerabilities-tied-to-salt-typhoon-attacks","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://www.greynoise.io/blog/greynoise-observes-active-exploitation-of-cisco-vulnerabilities-tied-to-salt-typhoon-attacks"}]},{"url":"https://info.greynoise.io/hubfs/resources/GreyNoise-How-Resurgent-Vulnerabilities-Jeopardize-Organizational-Security-Report.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://info.greynoise.io/hubfs/resources/GreyNoise-How-Resurgent-Vulnerabilities-Jeopardize-Organizational-Security-Report.pdf"}]},{"url":"https://github.com/qbit6634/Indian-Telecom-Threat-Report","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://github.com/qbit6634/Indian-Telecom-Threat-Report"}]},{"url":"https://security.pditechnologies.com/resources/q1-2025-cyber-threat-report/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://security.pditechnologies.com/resources/q1-2025-cyber-threat-report/"}]},{"url":"https://www.documentcloud.org/documents/25998809-20250611-dhs-salt-typhoon/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://www.documentcloud.org/documents/25998809-20250611-dhs-salt-typhoon/"}]},{"url":"https://blog.talosintelligence.com/static-tundra/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://blog.talosintelligence.com/static-tundra/"}]},{"url":"https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20180328-smi2.html","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20180328-smi2.html"}]},{"url":"https://www.ic3.gov/PSA/2025/PSA250820","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://www.ic3.gov/PSA/2025/PSA250820"}]},{"url":"https://media.defense.gov/2025/Aug/22/2003786665/-1/-1/0/CSA_COUNTERING_CHINA_STATE_ACTORS_COMPROMISE_OF_NETWORKS.PDF","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://media.defense.gov/2025/Aug/22/2003786665/-1/-1/0/CSA_COUNTERING_CHINA_STATE_ACTORS_COMPROMISE_OF_NETWORKS.PDF"}]},{"url":"https://www.splunk.com/en_us/blog/security/cve-2018-0171-static-tundra-smart-install-detection-guide.html","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://www.splunk.com/en_us/blog/security/cve-2018-0171-static-tundra-smart-install-detection-guide.html"}]},{"url":"https://eclypsium.com/blog/cisa-fbi-salt-typhoon-guidance/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://eclypsium.com/blog/cisa-fbi-salt-typhoon-guidance/"}]},{"url":"https://www.tenable.com/blog/frequently-asked-questions-about-chinese-state-sponsored-actors-compromising-global-networks","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://www.tenable.com/blog/frequently-asked-questions-about-chinese-state-sponsored-actors-compromising-global-networks"}]},{"url":"https://cyble.com/blog/chinese-state-sponsored-group/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://cyble.com/blog/chinese-state-sponsored-group/"}]},{"url":"https://eclypsium.com/blog/eol-devices-exploits-will-continue-until-security-improves/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://eclypsium.com/blog/eol-devices-exploits-will-continue-until-security-improves/"}]},{"url":"https://www.tenable.com/blog/cybersecurity-snapshot-critical-infrastructure-cybersecurity-ot-ics-iot-security-09-05-2025","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://www.tenable.com/blog/cybersecurity-snapshot-critical-infrastructure-cybersecurity-ot-ics-iot-security-09-05-2025"}]},{"url":"https://ics-cert.kaspersky.com/publications/reports/2025/12/01/apt-and-financial-attacks-on-industrial-organizations-in-q3-2025/","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://ics-cert.kaspersky.com/publications/reports/2025/12/01/apt-and-financial-attacks-on-industrial-organizations-in-q3-2025/"}]},{"url":"https://medium.com/s2wblog/detailed-analysis-of-recent-trends-in-known-exploited-vulnerabilities-c81678a47f39","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://medium.com/s2wblog/detailed-analysis-of-recent-trends-in-known-exploited-vulnerabilities-c81678a47f39"}]},{"url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025"}]},{"url":"https://shanakaanslemperera.substack.com/p/the-inverted-panopticon","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://shanakaanslemperera.substack.com/p/the-inverted-panopticon"}]},{"url":"https://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/files/2026/03/2025YiR-report.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/files/2026/03/2025YiR-report.pdf"}]},{"url":"https://medium.com/@nshcthreatrecon/2025-information-and-communications-industry-cyber-threat-landscape-aaffaa8d13c2","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://medium.com/@nshcthreatrecon/2025-information-and-communications-industry-cyber-threat-landscape-aaffaa8d13c2"}]},{"url":"https://www.trendmicro.com/vinfo/gb/security/news/cybercrime-and-digital-threats/edge-under-siege-how-state-sponsored-actors-exploit-your-perimeter","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://www.trendmicro.com/vinfo/gb/security/news/cybercrime-and-digital-threats/edge-under-siege-how-state-sponsored-actors-exploit-your-perimeter"}]},{"url":"https://hs-24091716.f.hubspotemail.net/hubfs/24091716/UltraViolet-2026-TIDE-Q2-Threat-Review-1.pdf","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://hs-24091716.f.hubspotemail.net/hubfs/24091716/UltraViolet-2026-TIDE-Q2-Threat-Review-1.pdf"}]},{"url":"https://media.defense.gov/2026/Jul/09/2003959498/-1/-1/0/CSA_IMPROVE_ROUTER_HYGIENE.PDF","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://media.defense.gov/2026/Jul/09/2003959498/-1/-1/0/CSA_IMPROVE_ROUTER_HYGIENE.PDF"}]},{"url":"https://www.vulncheck.com/blog/energetic-target-intel","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://www.vulncheck.com/blog/energetic-target-intel"}]},{"url":"https://vulncheck.com/xdb/6d4b443f23fc","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"6d4b443f23fc","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6d4b443f23fc","modified":"2021-11-03T00:00:00Z","url":"https://vulncheck.com/xdb/6d4b443f23fc"}]},{"url":"https://github.com/AlrikRr/Cisco-Smart-Exploit","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"6d4b443f23fc","modified":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"6d4b443f23fc","modified":"2021-11-03T00:00:00Z","url":"https://github.com/AlrikRr/Cisco-Smart-Exploit"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/AlrikRr/Cisco-Smart-Exploit","source":"poc-in-github","sourceId":"CVE-2018-0171","description":"Cisco SmartInstall Exploit [CVE-2018-0171]","modified":"2026-01-11T18:10:29Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2018-0171","url":"https://github.com/AlrikRr/Cisco-Smart-Exploit"},{"source":"poc-in-github","sourceId":"CVE-2018-0171","modified":"2026-01-11T18:10:29Z","url":"https://github.com/AlrikRr/Cisco-Smart-Exploit"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"6d4b443f23fc","url":"https://vulncheck.com/xdb/6d4b443f23fc","cve":"CVE-2018-0171","dateAdded":"2023-12-21T02:22:47Z","modified":"2021-11-03T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/AlrikRr/Cisco-Smart-Exploit","observations":[{"dateAdded":"2023-12-21T02:22:47Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"6d4b443f23fc","modified":"2021-11-03T00:00:00Z","url":"https://vulncheck.com/xdb/6d4b443f23fc"}]}],"vendorStatements":[],"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2021-11-03T00:00:00Z","modified":"2021-11-03T00:00:00Z","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Cisco","product":"IOS and IOS XE","dueDate":"2022-05-03T00:00:00Z","cisaDateAdded":"2021-11-03T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","modified":"2021-11-03T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","dateAdded":"2021-11-03T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/alerts/2022/04/27/2021-top-routinely-exploited-vulnerabilities","dateAdded":"2022-04-28T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://cisa.gov/news-events/alerts/2022/04/27/2021-top-routinely-exploited-vulnerabilities"},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-117a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/uscert/ncas/alerts/aa22-158a","dateAdded":"2022-06-07T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://www.cisa.gov/uscert/ncas/alerts/aa22-158a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-158a","dateAdded":"2022-06-10T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://cisa.gov/news-events/cybersecurity-advisories/aa22-158a"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://securityaffairs.co/wordpress/139821/security/cisco-old-vulnerabilities-exploitation.html","dateAdded":"2022-12-19T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://securityaffairs.co/wordpress/139821/security/cisco-old-vulnerabilities-exploitation.html"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.talosintelligence.com/salt-typhoon-analysis/","dateAdded":"2025-02-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://blog.talosintelligence.com/salt-typhoon-analysis/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://www.greynoise.io/blog/greynoise-observes-active-exploitation-of-cisco-vulnerabilities-tied-to-salt-typhoon-attacks","dateAdded":"2025-02-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://www.greynoise.io/blog/greynoise-observes-active-exploitation-of-cisco-vulnerabilities-tied-to-salt-typhoon-attacks"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://info.greynoise.io/hubfs/resources/GreyNoise-How-Resurgent-Vulnerabilities-Jeopardize-Organizational-Security-Report.pdf","dateAdded":"2025-04-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://info.greynoise.io/hubfs/resources/GreyNoise-How-Resurgent-Vulnerabilities-Jeopardize-Organizational-Security-Report.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://github.com/qbit6634/Indian-Telecom-Threat-Report","dateAdded":"2025-05-16T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://github.com/qbit6634/Indian-Telecom-Threat-Report"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://security.pditechnologies.com/resources/q1-2025-cyber-threat-report/","dateAdded":"2025-05-22T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://security.pditechnologies.com/resources/q1-2025-cyber-threat-report/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://www.documentcloud.org/documents/25998809-20250611-dhs-salt-typhoon/","dateAdded":"2025-06-11T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://www.documentcloud.org/documents/25998809-20250611-dhs-salt-typhoon/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://blog.talosintelligence.com/static-tundra/","dateAdded":"2025-08-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://blog.talosintelligence.com/static-tundra/"},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-20180328-smi2.html"},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://www.ic3.gov/PSA/2025/PSA250820"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://media.defense.gov/2025/Aug/22/2003786665/-1/-1/0/CSA_COUNTERING_CHINA_STATE_ACTORS_COMPROMISE_OF_NETWORKS.PDF","dateAdded":"2025-08-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://media.defense.gov/2025/Aug/22/2003786665/-1/-1/0/CSA_COUNTERING_CHINA_STATE_ACTORS_COMPROMISE_OF_NETWORKS.PDF"},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://www.splunk.com/en_us/blog/security/cve-2018-0171-static-tundra-smart-install-detection-guide.html"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://eclypsium.com/blog/cisa-fbi-salt-typhoon-guidance/","dateAdded":"2025-08-28T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://eclypsium.com/blog/cisa-fbi-salt-typhoon-guidance/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://www.tenable.com/blog/frequently-asked-questions-about-chinese-state-sponsored-actors-compromising-global-networks","dateAdded":"2025-08-29T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://www.tenable.com/blog/frequently-asked-questions-about-chinese-state-sponsored-actors-compromising-global-networks"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://cyble.com/blog/chinese-state-sponsored-group/","dateAdded":"2025-09-03T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://cyble.com/blog/chinese-state-sponsored-group/"},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://eclypsium.com/blog/eol-devices-exploits-will-continue-until-security-improves/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://www.tenable.com/blog/cybersecurity-snapshot-critical-infrastructure-cybersecurity-ot-ics-iot-security-09-05-2025","dateAdded":"2025-09-05T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://www.tenable.com/blog/cybersecurity-snapshot-critical-infrastructure-cybersecurity-ot-ics-iot-security-09-05-2025"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://ics-cert.kaspersky.com/publications/reports/2025/12/01/apt-and-financial-attacks-on-industrial-organizations-in-q3-2025/","dateAdded":"2025-12-01T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://ics-cert.kaspersky.com/publications/reports/2025/12/01/apt-and-financial-attacks-on-industrial-organizations-in-q3-2025/"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://medium.com/s2wblog/detailed-analysis-of-recent-trends-in-known-exploited-vulnerabilities-c81678a47f39","dateAdded":"2025-12-24T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://medium.com/s2wblog/detailed-analysis-of-recent-trends-in-known-exploited-vulnerabilities-c81678a47f39"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025","dateAdded":"2026-01-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://www.loginsoft.com/reports/annually/vulnerability-intelligence-report-2025"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://shanakaanslemperera.substack.com/p/the-inverted-panopticon","dateAdded":"2026-01-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://shanakaanslemperera.substack.com/p/the-inverted-panopticon"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/files/2026/03/2025YiR-report.pdf","dateAdded":"2026-03-23T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/files/2026/03/2025YiR-report.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://medium.com/@nshcthreatrecon/2025-information-and-communications-industry-cyber-threat-landscape-aaffaa8d13c2","dateAdded":"2026-03-27T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://medium.com/@nshcthreatrecon/2025-information-and-communications-industry-cyber-threat-landscape-aaffaa8d13c2"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://www.trendmicro.com/vinfo/gb/security/news/cybercrime-and-digital-threats/edge-under-siege-how-state-sponsored-actors-exploit-your-perimeter","dateAdded":"2026-04-20T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://www.trendmicro.com/vinfo/gb/security/news/cybercrime-and-digital-threats/edge-under-siege-how-state-sponsored-actors-exploit-your-perimeter"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://hs-24091716.f.hubspotemail.net/hubfs/24091716/UltraViolet-2026-TIDE-Q2-Threat-Review-1.pdf","dateAdded":"2026-06-15T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://hs-24091716.f.hubspotemail.net/hubfs/24091716/UltraViolet-2026-TIDE-Q2-Threat-Review-1.pdf"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://media.defense.gov/2026/Jul/09/2003959498/-1/-1/0/CSA_IMPROVE_ROUTER_HYGIENE.PDF","dateAdded":"2026-07-13T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://media.defense.gov/2026/Jul/09/2003959498/-1/-1/0/CSA_IMPROVE_ROUTER_HYGIENE.PDF"}]},{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","catalog":"VulnCheck KEV","kind":"report","url":"https://www.vulncheck.com/blog/energetic-target-intel","dateAdded":"2026-07-14T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2018-0171","url":"https://www.vulncheck.com/blog/energetic-target-intel"}]}]}