{"vulnerability": "CISCO-SA-20180328-SMI", "sightings": [{"uuid": "6047b6e4-c680-4b18-8ef1-7da4f2bc5c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cisco-sa-20180328-smi2", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115062090544361275", "content": "", "creation_timestamp": "2025-08-20T16:42:51.314904Z"}, {"uuid": "83677a2e-a20c-4e58-9ff5-43e8d5bd5f9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CISCO-SA-20180328-SMI2", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_channel/221", "content": "\u041e\u043f\u043f\u0430.. \u0443 \u043a\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f Cisco \u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0435\u0449\u0451 \u0433\u0434\u0435-\u0442\u043e, \u0435\u0441\u0442\u044c \u043f\u043e\u0432\u043e\u0434 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435:\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2\n\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u0430 \u0441 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u043c\u0438 PoC)) :\nhttps://embedi.com/blog/cisco-smart-install-remote-code-execution/", "creation_timestamp": "2018-04-06T03:17:37.000000Z"}, {"uuid": "87a08fbc-d162-401a-8714-6cb0d6f2e8e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CISCO-SA-20180328-SMI2", "type": "seen", "source": "https://t.me/information_security_channel/15590", "content": "Critical Flaw Exposes Many Cisco Devices to Remote Attacks\nhttp://feedproxy.google.com/~r/Securityweek/~3/4Q4ROpCwsY0/critical-flaw-exposes-many-cisco-devices-remote-attacks\n\nCisco has patched more than 30 vulnerabilities in its IOS software, including a critical remote code execution flaw that exposes hundreds of thousands \u2013 possibly millions \u2013 of devices to remote attacks launched over the Internet.\nA total of three vulnerabilities have been rated critical. One of them is CVE-2018-0171 (https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2), an issue discovered by researchers at Embedi in the Smart Install feature in IOS and IOS XE software.\nAn unauthenticated attacker can send specially crafted Smart Install messages to an affected device on TCP port 4786 and cause it to enter a denial-of-service (DoS) condition or execute arbitrary code.\nCisco pointed out that Smart Install is enabled by default on switches that have not received a recent update for automatically disabling the feature when it\u2019s not in use.\nEmbedi has published a blog post (https://embedi.com/blog/cisco-smart-install-remote-code-execution/) detailing CVE-2018-0171 and how it can be exploited. Researchers initially believed the vulnerability could only be exploited by an attacker inside the targeted organization\u2019s network. However, an Internet scan revealed that there are roughly 250,000 vulnerable Cisco devices that have TCP port 4786 open.\nFurthermore, Embedi told SecurityWeek that it has identified approximately 8.5 million devices that use this port, but researchers have not been able to determine if the Smart Install technology is present on these systems.\nAnother IOS vulnerability patched by Cisco and rated critical is CVE-2018-0150, a backdoor (https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-xesc) that allows an attacker to remotely access a device. This security hole is introduced by the existence of an undocumented account with a default username and password. The credentials provide access to a device with privilege level 15, the highest level of access for Cisco network devices.\nThe last critical security hole  (https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-qos)is CVE-2018-0151, which affects the quality of service (QoS) subsystem of IOS and IOS XE software. The flaw can allow a remote an unauthenticated attacker to cause a DoS condition or execute code with elevated privileges by sending malicious packets to a device.\nThe networking giant has patched a total of 17 high severity flaws in IOS and IOS XE software. The list includes mostly DoS issues, but some of the vulnerabilities can be exploited for remote code execution and privilege escalation.\nCisco also patched over a dozen IOS vulnerabilities rated \u201cmedium severity.\u201d A majority of the bugs were discovered by the company itself and there is no evidence that any of them have been exploited for malicious purposes.\nRelated: Cisco Patches Hard-coded Password in PCP Software (https://www.securityweek.com/cisco-patches-hard-coded-password-pcp-software)\nRelated: Cisco Reissues Patches for Critical Firewall Flaw (https://www.securityweek.com/cisco-reissues-patches-critical-firewall-flaw)\nRelated: Cisco Patches Flaws in Email Security, Other Products (https://www.securityweek.com/cisco-patches-flaws-email-security-other-products)", "creation_timestamp": "2018-03-30T12:01:10.000000Z"}, {"uuid": "a11ceb7d-868c-4660-9356-807313ddf96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CISCO-SA-20180328-SMI2", "type": "seen", "source": "https://t.me/canyoupwnme/3491", "content": "Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2", "creation_timestamp": "2018-03-30T13:51:57.000000Z"}, {"uuid": "74934a47-18ca-4208-af12-a582c842cf36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CISCO-SA-20180328-SMI2", "type": "exploited", "source": "https://t.me/Kaspersky4media/97", "content": "\u0427\u0442\u043e \u0441\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c \u0441 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u043e\u043c?\n \n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u0430\u0448\u0438\u043c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u043c, \u0441\u0435\u0439\u0447\u0430\u0441 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043c\u0430\u0441\u0441\u0438\u0432\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u0438\u0442\u0447\u0438 Cisco. \u041d\u0435\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Cisco Smart Install Client, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n \n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u0435\u043d\u044f\u044e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0432 \u043d\u0435\u043c \u043f\u043e\u0441\u043b\u0430\u043d\u0438\u0435 \u201cDo not mess with our elections\u201d (\u00ab\u041d\u0435 \u0432\u043c\u0435\u0448\u0438\u0432\u0430\u0439\u0442\u0435\u0441\u044c \u0432 \u043d\u0430\u0448\u0438 \u0432\u044b\u0431\u043e\u0440\u044b\u00bb). \u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u0442, \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 Shodan \u0438\u043b\u0438 \u0447\u0442\u043e-\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0435\u0435. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0446\u0435\u043b\u044b\u0435 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u044b \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u0438 \u043a \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.\n \n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco Talos, \u0432 \u043c\u0438\u0440\u0435 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 168 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041c\u0430\u0441\u0448\u0442\u0430\u0431\u044b \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u044f\u0441\u043d\u044b, \u043d\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c\u0438.\n \n\u0414\u043b\u044f \u0430\u0434\u043c\u0438\u043d\u043e\u0432: \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u044e \u00ab\u0446\u0438\u0441\u043a\u0443\u00bb \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 show vstack config. \u0415\u0441\u043b\u0438 \u0432 \u043e\u0442\u0432\u0435\u0442 \u0441\u0432\u0438\u0442\u0447 \u0432\u044b\u0434\u0430\u0435\u0442 \u0432\u0430\u043c \u201cSmartInstall enabled\u201d, \u0442\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0439\u0442\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 no vstack. \n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043f\u0440\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2", "creation_timestamp": "2026-08-04T12:00:09.348172Z"}, {"uuid": "d6c1f38a-97fb-456a-b474-863e228a80fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CISCO-SA-20180328-SMI2", "type": "exploited", "source": "https://t.me/Kaspersky4media/97", "content": "\u0427\u0442\u043e \u0441\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c \u0441 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u043e\u043c?\n \n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u0430\u0448\u0438\u043c \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u043c, \u0441\u0435\u0439\u0447\u0430\u0441 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043c\u0430\u0441\u0441\u0438\u0432\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0441\u0432\u0438\u0442\u0447\u0438 Cisco. \u041d\u0435\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Cisco Smart Install Client, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n \n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u0435\u043d\u044f\u044e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0444\u0430\u0439\u043b, \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0432 \u043d\u0435\u043c \u043f\u043e\u0441\u043b\u0430\u043d\u0438\u0435 \u201cDo not mess with our elections\u201d (\u00ab\u041d\u0435 \u0432\u043c\u0435\u0448\u0438\u0432\u0430\u0439\u0442\u0435\u0441\u044c \u0432 \u043d\u0430\u0448\u0438 \u0432\u044b\u0431\u043e\u0440\u044b\u00bb). \u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u0442, \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 Shodan \u0438\u043b\u0438 \u0447\u0442\u043e-\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0439 \u0435\u0435. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0446\u0435\u043b\u044b\u0435 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u044b \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u0438 \u043a \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432.\n \n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Cisco Talos, \u0432 \u043c\u0438\u0440\u0435 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 168 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041c\u0430\u0441\u0448\u0442\u0430\u0431\u044b \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u044f\u0441\u043d\u044b, \u043d\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0447\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c\u0438.\n \n\u0414\u043b\u044f \u0430\u0434\u043c\u0438\u043d\u043e\u0432: \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0432\u043e\u044e \u00ab\u0446\u0438\u0441\u043a\u0443\u00bb \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 show vstack config. \u0415\u0441\u043b\u0438 \u0432 \u043e\u0442\u0432\u0435\u0442 \u0441\u0432\u0438\u0442\u0447 \u0432\u044b\u0434\u0430\u0435\u0442 \u0432\u0430\u043c \u201cSmartInstall enabled\u201d, \u0442\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0439\u0442\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 no vstack. \n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043f\u0440\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2", "creation_timestamp": "2026-08-05T00:00:45.456234Z"}, {"uuid": "6126e45d-d32f-4406-9d64-8465f8435322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CISCO-SA-20180328-SMI", "type": "seen", "source": "https://t.me/informationsec/2591", "content": "#CVE-2018-0171 #Affected_Products #April_07_2018\n@soc24x7\n\n\u0646\u0642\u0635 \u06af\u0632\u0627\u0631\u0634 \u0645\u0631\u06a9\u0632 \u0645\u0627\u0647\u0631 \n\n\u062f\u0631 \u06af\u0632\u0627\u0631\u0634 \u0645\u0627\u0647\u0631 \u0646\u0642\u0635\u06cc \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0628\u0627\u06cc\u062f \u0628\u0647 \u0622\u0646 \u062f\u0642\u062a \u06a9\u0631\u062f:\n\n\u0645\u0637\u0627\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 \u0645\u0631\u06a9\u0632 \u0645\u0627\u0647\u0631 \u0633\u0648\u0626\u06cc\u0686 \u0647\u0627\u06cc \u0633\u0631\u06cc 3x \u0648 4x \u0633\u06cc\u0633\u06a9\u0648 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0646\u062f. \u0627\u06cc\u0646 \u062f\u0631 \u062d\u0627\u0644\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0633\u06cc\u0633\u06a9\u0648 \u062f\u0631 Advisory report \u062e\u0648\u062f \u0628\u0647 \u0646\u0648\u0639 \u062a\u062c\u0647\u06cc\u0632 \u0627\u0634\u0627\u0631\u0647 \u0646\u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u0646\u0648\u0633\u062a\u0647 \u0627\u0633\u062a \u062a\u0645\u0627\u0645\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0633\u0648\u0626\u06cc\u062c \u0633\u06cc\u0633\u06a9\u0648 \u0628\u0627 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 IOS \u0648 IOS XE \u06a9\u0647 \u0627\u0632 \u0642\u0627\u0628\u0644\u06cc\u062a Smart Install \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0645\u06cc \u06a9\u0646\u0646\u062f. \n\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi#fixed\n\n\u0628\u0647 \u0639\u0644\u0627\u0648\u0647 \u06a9\u0647 \u0634\u0631\u06a9\u062a \u06a9\u0634\u0641 \u06a9\u0646\u0646\u062f\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u060c  EMBEDI \u0628\u0631\u062e\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0633\u06cc\u0633\u06a9\u0648 \u0631\u0627 \u0646\u0627\u0645 \u0628\u0631\u062f\u0647 \u0648 \u0622\u0646 \u062f\u0644\u06cc\u0644 \u0645\u0648\u0641\u0642\u06cc\u062a \u0622\u0646 \u0647\u0627 \u062f\u0631 \u062a\u0633\u062a \u0647\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0634\u062f\u0647 \u0630\u06a9\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0645\u0639\u0646\u06cc \u0622\u0646 \u0646\u06cc\u0633\u062a \u06a9\u0647 \u0633\u0627\u06cc\u0631 \u0645\u062f\u0644 \u0647\u0627\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0646\u06af\u0631\u0641\u062a\u0647 \u0627\u0646\u062f.\n\n\n    Cisco Catalyst 4500 Supervisor Engine 6L-E\n        Cisco IOS 15.2.2E6 (Latest, Suggested)\n            cat4500e-entservicesk9-mz.152-2.E6.bin (23-DEC-2016)\n    Cisco Catalyst 2960-48TT-L Switch\n        Cisco IOS 12.2(55)SE11 (Suggested)\n            c2960-lanbasek9-mz.122-55.SE11.bin (18-AUG-2016)\n        Cisco IOS 15.0.2-SE10a (Latest)\n            c2960-lanbasek9-mz.150-2.SE10a.bin (10-NOV-2016)\n    Cisco Catalyst 3850-24P-E Switch\n        Cisco IOS-XE 03.03.05.SE\n            cat3k_caa-universalk9.SPA.03.03.05.SE.150-1.EZ5.bin (03-NOV-2014)\n\n\u062f\u0642\u062a \u06a9\u0646\u06cc\u0645 \u062f\u0631 \u06af\u0632\u0627\u0631\u0634\u06cc \u06a9\u0647 \u062f\u0631 \u0627\u0628\u062a\u062f\u0627\u06cc 2017  \u062f\u0631 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0646 \u0627\u0632 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0633\u06cc\u0633\u06a9\u0648 \u062a\u0648\u0633\u0637 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Smart Install \u0645\u06cc \u0628\u0627\u0634\u062f\u060c \u0628\u0647 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0632\u06cc\u0631 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a\u06cc \u06a9\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0645\u06cc \u06a9\u0646\u0646\u062f \u0627\u0634\u0627\u0631\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a  (https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170214-smi) : \n\n\n    Cisco Catalyst 4500 and 4500-X Series Switches:\n    3.9.2E/15.2(5)E2\n    Cisco Catalyst 6500 Series Switches:\n    15.1(2)SY11\n    15.2(1)SY5\n    15.2(2)SY3\n    Cisco Industrial Ethernet 4000 Series Switches:\n    15.2(5)E2, 15.2(5)E2a\n    Cisco ME 3400 and ME 3400E Series Ethernet Access Switches:\n    12.2(60)EZ11", "creation_timestamp": "2026-08-22T14:00:16.154961Z"}, {"uuid": "2fc43b65-4989-4da0-b69e-4c2cc35069e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CISCO-SA-20180328-SMI2", "type": "seen", "source": "https://t.me/informationsec/2587", "content": "#\u062e\u0628\u0631   \n\n\u2705 \u062c\u0632\u0626\u06cc\u0627\u062a\u06cc \u0627\u0632 \u0631\u062e\u062f\u0627\u062f \u0633\u0627\u06cc\u0628\u0631\u06cc \u062f\u06cc\u0634\u0628 \u06a9\u0647 \u0645\u0648\u062c\u0628 \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u0645\u062a\u0639\u062f\u062f\u06cc \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0648 \u0633\u0627\u06cc\u0631 \u0646\u0642\u0627\u0637 \u062f\u0646\u06cc\u0627 \u0634\u062f.\n\n\ud83d\udd39\u062f\u0631 2018 March 28  \u0634\u0631\u06a9\u062a #Cisco \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0631\u0627 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a #Smart_Install\u060c \u0646\u0641\u0648\u0630 \u06af\u0631\u0627\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u0633\u062a\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u0628\u0631\u062e\u06cc \u0627\u0632 \u0633\u0648\u0626\u06cc\u0686 \u0647\u0627\u06cc Cisco \u0628\u0627 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 IOS  \u0648  IOS XR \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0628\u06af\u06cc\u0631\u0646\u062f \u0648 \u0646\u0633\u0628\u062a \u0628\u0647 reload \u062f\u0633\u062a\u06af\u0627\u0647\u060c \u0628\u0627\u0632\u0646\u0634\u0627\u0646\u06cc \u0648 \u067e\u0627\u06a9 \u06a9\u0631\u062f\u0646 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0622\u0646 \u0648 \u06cc\u0627 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0627\u0642\u062f\u0627\u0645 \u06a9\u0646\u0646\u062f.\n\n@informationsec\n\ud83d\udd38\u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0645\u062a\u0627\u062b\u0631 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0639\u0628\u0627\u0631\u062a\u0646\u062f \u0627\u0632:\n\n\u2796Catalyst 4500 Supervisor Engines\n\u2796Catalyst 3850 Series\n\u2796Catalyst 3750 Series\n\u2796Catalyst 3650 Series\n\u2796Catalyst 3560 Series\n\u2796Catalyst 2960 Series\n\u2796Catalyst 2975 Series\n\u2796IE 2000\n\u2796IE 3000\n\u2796IE 3010\n\u2796IE 4000\n\u2796IE 4010\n\u2796IE 5000\n\u2796SM-ES2 SKUs\n\u2796SM-ES3 SKUs\n\u2796NME-16ES-1G-P\n\u2796SM-X-ES3 SKUs\n\n\ud83d\udd39\u062f\u06cc\u0634\u0628 \u062a\u0639\u062f\u0627\u062f\u06cc \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u0647\u0627 \u0648 service provider\u0647\u0627 \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0645\u0648\u0627\u062c\u0647 \u0634\u062f\u0646\u062f \u06a9\u0647 \u0627\u063a\u0644\u0628 \u0645\u0648\u062c\u0628 \u0628\u0627\u0632\u0646\u0634\u0627\u0646\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062f\u0633\u062a\u06af\u0627\u0647\u0647\u0627 \u0628\u0647 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u067e\u06cc\u0634 \u0641\u0631\u0636 \u0648 \u062f\u0631 \u0646\u062a\u06cc\u062c\u0647 \u0642\u0637\u0639\u06cc \u0627\u0631\u062a\u0628\u0627\u0637 \u0634\u062f.\n\n@informationsec\n\n\ud83d\udd38\u0631\u0627\u0647\u06a9\u0627\u0631 \u067e\u06cc\u0634\u0646\u0647\u0627\u062f\u06cc \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0645\u0648\u0642\u062a \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u063a\u06cc\u0631 \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0627\u06cc\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a  \u0648 \u06cc\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 ACL \u0645\u0646\u0627\u0633\u0628 \u0628\u0631\u0627\u06cc \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u067e\u0648\u0631\u062a \u06f4\u06f7\u06f8\u06f6 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0627\u06cc\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a \u0628\u0647 \u0627\u06cc\u0646 \u0634\u0631\u062d \u0627\u0633\u062a:\n\nswitch#show vstack config\nswitch(conf)#no vstack \n\n\u06cc\u0627\nip access-list extended SMI_HARDENING_LIST\n     permit tcp host 10.10.10.1 host 10.10.10.200 eq 4786\n     deny tcp any any eq 4786\n     permit ip any any\n\n\n\ud83d\udd39\u0628\u062f\u06cc\u0647\u06cc \u0627\u0633\u062a \u0627\u0635\u0644\u06cc \u062a\u0631\u06cc\u0646 \u0631\u0648\u0634 \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0630\u06a9\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\n@informationsec\n\n\ud83d\udd38\u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 Exploitation Tool  \u0642\u0627\u0628\u0644\u06cc\u062a Smart Install  \u0627\u0632 \u0644\u06cc\u0646\u06a9 \u0632\u06cc\u0631 \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0627\u0633\u062a.(\u0645\u0633\u0626\u0648\u0644\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0627\u0628\u062c\u0627 \u0627\u0632\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0647 \u0639\u0647\u062f\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u0633\u062a).\n\nhttps://github.com/Sab0tag3d/SIET\n\n\ud83d\udd39\u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 \u062f\u0631 \u0628\u0627\u0631\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0648 \u0646\u062d\u0648\u0647 \u0645\u0642\u0627\u0628\u0644\u0647 \u0628\u0627 \u0622\u0646 \u0631\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0632\u06cc\u0631 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0646\u06cc\u062f.\n\n\u0645\u0646\u0628\u0639\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2\nhttp://blog.talosintelligence.com/2018/04/critical-infrastructure-at-risk.html\nhttps://thehackernews.com/2018/04/cisco-switches-hacking.html\nblog.rapid7.com/2018/03/29/cisco-smart-install-smi-remote-code-execution-what-you-need-to-know/", "creation_timestamp": "2026-08-22T14:00:16.326550Z"}, {"uuid": "8a5fdc41-0ba6-4cbe-9507-c7c594cba89b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CISCO-SA-20180328-SMI2", "type": "published-proof-of-concept", "source": "https://t.me/informationsec/2587", "content": "#\u062e\u0628\u0631   \n\n\u2705 \u062c\u0632\u0626\u06cc\u0627\u062a\u06cc \u0627\u0632 \u0631\u062e\u062f\u0627\u062f \u0633\u0627\u06cc\u0628\u0631\u06cc \u062f\u06cc\u0634\u0628 \u06a9\u0647 \u0645\u0648\u062c\u0628 \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u0645\u062a\u0639\u062f\u062f\u06cc \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0648 \u0633\u0627\u06cc\u0631 \u0646\u0642\u0627\u0637 \u062f\u0646\u06cc\u0627 \u0634\u062f.\n\n\ud83d\udd39\u062f\u0631 2018 March 28  \u0634\u0631\u06a9\u062a #Cisco \u06cc\u06a9 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u062d\u0631\u0627\u0646\u06cc \u0631\u0627 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0642\u0627\u0628\u0644\u06cc\u062a #Smart_Install\u060c \u0646\u0641\u0648\u0630 \u06af\u0631\u0627\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u0633\u062a\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u0628\u0631\u062e\u06cc \u0627\u0632 \u0633\u0648\u0626\u06cc\u0686 \u0647\u0627\u06cc Cisco \u0628\u0627 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 IOS  \u0648  IOS XR \u0631\u0627 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0628\u06af\u06cc\u0631\u0646\u062f \u0648 \u0646\u0633\u0628\u062a \u0628\u0647 reload \u062f\u0633\u062a\u06af\u0627\u0647\u060c \u0628\u0627\u0632\u0646\u0634\u0627\u0646\u06cc \u0648 \u067e\u0627\u06a9 \u06a9\u0631\u062f\u0646 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0622\u0646 \u0648 \u06cc\u0627 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0627\u0642\u062f\u0627\u0645 \u06a9\u0646\u0646\u062f.\n\n@informationsec\n\ud83d\udd38\u062f\u0633\u062a\u06af\u0627\u0647 \u0647\u0627\u06cc \u0645\u062a\u0627\u062b\u0631 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0639\u0628\u0627\u0631\u062a\u0646\u062f \u0627\u0632:\n\n\u2796Catalyst 4500 Supervisor Engines\n\u2796Catalyst 3850 Series\n\u2796Catalyst 3750 Series\n\u2796Catalyst 3650 Series\n\u2796Catalyst 3560 Series\n\u2796Catalyst 2960 Series\n\u2796Catalyst 2975 Series\n\u2796IE 2000\n\u2796IE 3000\n\u2796IE 3010\n\u2796IE 4000\n\u2796IE 4010\n\u2796IE 5000\n\u2796SM-ES2 SKUs\n\u2796SM-ES3 SKUs\n\u2796NME-16ES-1G-P\n\u2796SM-X-ES3 SKUs\n\n\ud83d\udd39\u062f\u06cc\u0634\u0628 \u062a\u0639\u062f\u0627\u062f\u06cc \u0627\u0632 \u0633\u0627\u0632\u0645\u0627\u0646\u0647\u0627 \u0648 service provider\u0647\u0627 \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0645\u0648\u0627\u062c\u0647 \u0634\u062f\u0646\u062f \u06a9\u0647 \u0627\u063a\u0644\u0628 \u0645\u0648\u062c\u0628 \u0628\u0627\u0632\u0646\u0634\u0627\u0646\u06cc \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062f\u0633\u062a\u06af\u0627\u0647\u0647\u0627 \u0628\u0647 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u067e\u06cc\u0634 \u0641\u0631\u0636 \u0648 \u062f\u0631 \u0646\u062a\u06cc\u062c\u0647 \u0642\u0637\u0639\u06cc \u0627\u0631\u062a\u0628\u0627\u0637 \u0634\u062f.\n\n@informationsec\n\n\ud83d\udd38\u0631\u0627\u0647\u06a9\u0627\u0631 \u067e\u06cc\u0634\u0646\u0647\u0627\u062f\u06cc \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0645\u0648\u0642\u062a \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u063a\u06cc\u0631 \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0627\u06cc\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a  \u0648 \u06cc\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 ACL \u0645\u0646\u0627\u0633\u0628 \u0628\u0631\u0627\u06cc \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u067e\u0648\u0631\u062a \u06f4\u06f7\u06f8\u06f6 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0627\u06cc\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a \u0628\u0647 \u0627\u06cc\u0646 \u0634\u0631\u062d \u0627\u0633\u062a:\n\nswitch#show vstack config\nswitch(conf)#no vstack \n\n\u06cc\u0627\nip access-list extended SMI_HARDENING_LIST\n     permit tcp host 10.10.10.1 host 10.10.10.200 eq 4786\n     deny tcp any any eq 4786\n     permit ip any any\n\n\n\ud83d\udd39\u0628\u062f\u06cc\u0647\u06cc \u0627\u0633\u062a \u0627\u0635\u0644\u06cc \u062a\u0631\u06cc\u0646 \u0631\u0648\u0634 \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0628\u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0630\u06a9\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\n@informationsec\n\n\ud83d\udd38\u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 Exploitation Tool  \u0642\u0627\u0628\u0644\u06cc\u062a Smart Install  \u0627\u0632 \u0644\u06cc\u0646\u06a9 \u0632\u06cc\u0631 \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0627\u0633\u062a.(\u0645\u0633\u0626\u0648\u0644\u06cc\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0627\u0628\u062c\u0627 \u0627\u0632\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0628\u0647 \u0639\u0647\u062f\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u0633\u062a).\n\nhttps://github.com/Sab0tag3d/SIET\n\n\ud83d\udd39\u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631 \u062f\u0631 \u0628\u0627\u0631\u0647 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0648 \u0646\u062d\u0648\u0647 \u0645\u0642\u0627\u0628\u0644\u0647 \u0628\u0627 \u0622\u0646 \u0631\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0632\u06cc\u0631 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0646\u06cc\u062f.\n\n\u0645\u0646\u0628\u0639\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2\nhttp://blog.talosintelligence.com/2018/04/critical-infrastructure-at-risk.html\nhttps://thehackernews.com/2018/04/cisco-switches-hacking.html\nblog.rapid7.com/2018/03/29/cisco-smart-install-smi-remote-code-execution-what-you-need-to-know/", "creation_timestamp": "2026-08-23T00:00:37.221542Z"}, {"uuid": "364037a2-0e52-41d9-a5df-38f950f892e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CISCO-SA-20180328-SMI", "type": "seen", "source": "https://t.me/informationsec/2591", "content": "#CVE-2018-0171 #Affected_Products #April_07_2018\n@soc24x7\n\n\u0646\u0642\u0635 \u06af\u0632\u0627\u0631\u0634 \u0645\u0631\u06a9\u0632 \u0645\u0627\u0647\u0631 \n\n\u062f\u0631 \u06af\u0632\u0627\u0631\u0634 \u0645\u0627\u0647\u0631 \u0646\u0642\u0635\u06cc \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u0628\u0627\u06cc\u062f \u0628\u0647 \u0622\u0646 \u062f\u0642\u062a \u06a9\u0631\u062f:\n\n\u0645\u0637\u0627\u0628\u0642 \u06af\u0632\u0627\u0631\u0634 \u0645\u0631\u06a9\u0632 \u0645\u0627\u0647\u0631 \u0633\u0648\u0626\u06cc\u0686 \u0647\u0627\u06cc \u0633\u0631\u06cc 3x \u0648 4x \u0633\u06cc\u0633\u06a9\u0648 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0646\u062f. \u0627\u06cc\u0646 \u062f\u0631 \u062d\u0627\u0644\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0633\u06cc\u0633\u06a9\u0648 \u062f\u0631 Advisory report \u062e\u0648\u062f \u0628\u0647 \u0646\u0648\u0639 \u062a\u062c\u0647\u06cc\u0632 \u0627\u0634\u0627\u0631\u0647 \u0646\u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u0646\u0648\u0633\u062a\u0647 \u0627\u0633\u062a \u062a\u0645\u0627\u0645\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0633\u0648\u0626\u06cc\u062c \u0633\u06cc\u0633\u06a9\u0648 \u0628\u0627 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 IOS \u0648 IOS XE \u06a9\u0647 \u0627\u0632 \u0642\u0627\u0628\u0644\u06cc\u062a Smart Install \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0645\u06cc \u06a9\u0646\u0646\u062f. \n\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi#fixed\n\n\u0628\u0647 \u0639\u0644\u0627\u0648\u0647 \u06a9\u0647 \u0634\u0631\u06a9\u062a \u06a9\u0634\u0641 \u06a9\u0646\u0646\u062f\u0647 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u060c  EMBEDI \u0628\u0631\u062e\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0633\u06cc\u0633\u06a9\u0648 \u0631\u0627 \u0646\u0627\u0645 \u0628\u0631\u062f\u0647 \u0648 \u0622\u0646 \u062f\u0644\u06cc\u0644 \u0645\u0648\u0641\u0642\u06cc\u062a \u0622\u0646 \u0647\u0627 \u062f\u0631 \u062a\u0633\u062a \u0647\u0627\u06cc \u0627\u0646\u062c\u0627\u0645 \u0634\u062f\u0647 \u0630\u06a9\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0645\u0639\u0646\u06cc \u0622\u0646 \u0646\u06cc\u0633\u062a \u06a9\u0647 \u0633\u0627\u06cc\u0631 \u0645\u062f\u0644 \u0647\u0627\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u0646\u06af\u0631\u0641\u062a\u0647 \u0627\u0646\u062f.\n\n\n    Cisco Catalyst 4500 Supervisor Engine 6L-E\n        Cisco IOS 15.2.2E6 (Latest, Suggested)\n            cat4500e-entservicesk9-mz.152-2.E6.bin (23-DEC-2016)\n    Cisco Catalyst 2960-48TT-L Switch\n        Cisco IOS 12.2(55)SE11 (Suggested)\n            c2960-lanbasek9-mz.122-55.SE11.bin (18-AUG-2016)\n        Cisco IOS 15.0.2-SE10a (Latest)\n            c2960-lanbasek9-mz.150-2.SE10a.bin (10-NOV-2016)\n    Cisco Catalyst 3850-24P-E Switch\n        Cisco IOS-XE 03.03.05.SE\n            cat3k_caa-universalk9.SPA.03.03.05.SE.150-1.EZ5.bin (03-NOV-2014)\n\n\u062f\u0642\u062a \u06a9\u0646\u06cc\u0645 \u062f\u0631 \u06af\u0632\u0627\u0631\u0634\u06cc \u06a9\u0647 \u062f\u0631 \u0627\u0628\u062a\u062f\u0627\u06cc 2017  \u062f\u0631 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0646 \u0627\u0632 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0633\u06cc\u0633\u06a9\u0648 \u062a\u0648\u0633\u0637 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc Smart Install \u0645\u06cc \u0628\u0627\u0634\u062f\u060c \u0628\u0647 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0632\u06cc\u0631 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u062a\u062c\u0647\u06cc\u0632\u0627\u062a\u06cc \u06a9\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0645\u06cc \u06a9\u0646\u0646\u062f \u0627\u0634\u0627\u0631\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a  (https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170214-smi) : \n\n\n    Cisco Catalyst 4500 and 4500-X Series Switches:\n    3.9.2E/15.2(5)E2\n    Cisco Catalyst 6500 Series Switches:\n    15.1(2)SY11\n    15.2(1)SY5\n    15.2(2)SY3\n    Cisco Industrial Ethernet 4000 Series Switches:\n    15.2(5)E2, 15.2(5)E2a\n    Cisco ME 3400 and ME 3400E Series Ethernet Access Switches:\n    12.2(60)EZ11", "creation_timestamp": "2026-08-23T00:00:37.375441Z"}]}