{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T16:02:57Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","cve":{"id":"CVE-2018-0171","kev":true,"kev_added_at":"2021-11-03","epss":{"score":0.99512,"percentile":0.99941,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"}},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"advisory_count":1,"visible_product_count":4,"public_evidence_count":4,"kev":true},"advisories":[{"id":"cisco-sa-20180328-smi2","slug":"cisco-sa-20180328-smi2","title":"Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"}],"public_evidence":[{"product":{"name":"Cisco IOS","slug":"cisco-ios","vendor":"Cisco"},"advisory":{"id":"cisco-sa-20180328-smi2","slug":"cisco-sa-20180328-smi2","title":"Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T01:36:11Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"12.2(55)EX; 12.2(55)EX1; 12.2(55)EX2; 12.2(55)EX3; 12.2(55)EY; 12.2(55)EZ; 12.2(55)SE; 12.2(55)SE1; 12.2(55)SE10; 12.2(55)SE11; 12.2(55)SE12; 12.2(55)SE2; 12.2(55)SE3; 12.2(55)SE4; 12.2(55)SE5; 12.2(55)SE6; 12.2(55)SE7; 12.2(55)SE8; 12.2(55)SE9; 12.2(58)EX; 12.2(58)EY; 12.2(58)EY1; 12.2(58)EY2; 12.2(58)EZ; 12.2(58)SE; 12.2(58)SE1; 12.2(58)SE2; 12.2(60)EZ; 12.2(60)EZ1; 12.2(60)EZ10; 12.2(60)EZ2; 12.2(60)EZ3; 12.2(60)EZ4; 12.2(60)EZ5; 12.2(60)EZ6; 12.2(60)EZ7; 12.2(60)EZ8; 12.2(60)EZ9; 15.0(1)EX; 15.0(1)EY; 15.0(1)EY1; 15.0(1)EY2; 15.0(1)SE; 15.0(1)SE1; 15.0(1)SE2; 15.0(1)SE3; 15.0(2)EA; 15.0(2)EA1; 15.0(2)EJ; 15.0(2)EJ1; 15.0(2)EK; 15.0(2)EK1; 15.0(2)EX; 15.0(2)EX1; 15.0(2)EX10; 15.0(2)EX11; 15.0(2)EX12; 15.0(2)EX13; 15.0(2)EX2; 15.0(2)EX3; 15.0(2)EX4; 15.0(2)EX5; 15.0(2)EX6; 15.0(2)EX7; 15.0(2)EX8; 15.0(2)EY; 15.0(2)EY1; 15.0(2)EY2; 15.0(2)EY3; 15.0(2)EZ; 15.0(2)SE; 15.0(2)SE1; 15.0(2)SE10; 15.0(2)SE10a; 15.0(2)SE11; 15.0(2)SE2; 15.0(2)SE3; 15.0(2)SE4; 15.0(2)SE5; 15.0(2)SE6; 15.0(2)SE7; 15.0(2)SE8; 15.0(2)SE9; 15.0(2a)EX5; 15.0(2a)SE9; 15.1(1)SG; 15.1(1)SG1; 15.1(1)SG2; 15.1(1)SY; 15.1(1)SY1; 15.1(1)SY2; 15.1(1)SY3; 15.1(1)SY4; 15.1(1)SY5; 15.1(1)SY6; 15.1(2)SG; 15.1(2)SG1; 15.1(2)SG2; 15.1(2)SG3; 15.1(2)SG4; 15.1(2)SG5; 15.1(2)SG6; 15.1(2)SG7; 15.1(2)SG8; 15.1(2)SY; 15.1(2)SY1; 15.1(2)SY10; 15.1(2)SY2; 15.1(2)SY3; 15.1(2)SY4; 15.1(2)SY4a; 15.1(2)SY5; 15.1(2)SY6; 15.1(2)SY7; 15.1(2)SY8; 15.1(2)SY9; 15.1(3)SVR1; 15.1(3)SVR10; 15.1(3)SVR2; 15.1(3)SVR3; 15.1(3)SVS; 15.1(3)SVS1; 15.1(3)SVT1; 15.1(3)SVT2; 15.1(3)SVT3; 15.1(3)SVT4; 15.1(3)SVU1; 15.1(3)SVU10; 15.1(3)SVU11; 15.1(3)SVU2; 15.1(3)SVU20; 15.1(3)SVU21; 15.1(3)SVV1; 15.1(3)SVV2; 15.1(3)SVV3; 15.1(3)SVV4; 15.1(3)SVW; 15.1(3)SVW1; 15.1(3)SVX; 15.1(3)SVX1; 15.1(4)GC; 15.1(4)GC1; 15.1(4)GC2; 15.1(4)M; 15.1(4)M0a; 15.1(4)M0b; 15.1(4)M1; 15.1(4)M10; 15.1(4)M12a; 15.1(4)M2; 15.1(4)M3; 15.1(4)M4; 15.1(4)M5; 15.1(4)M6; 15.1(4)M7; 15.1(4)M8; 15.1(4)M9; 15.1(4)XB4; 15.1(4)XB5; 15.1(4)XB5a; 15.1(4)XB6; 15.1(4)XB7; 15.1(4)XB8; 15.1(4)XB8a; 15.2(1)E; 15.2(1)E1; 15.2(1)E2; 15.2(1)E3; 15.2(1)EY; 15.2(1)GC; 15.2(1)GC1; 15.2(1)GC2; 15.2(1)SY; 15.2(1)SY0a; 15.2(1)SY1; 15.2(1)SY1a; 15.2(1)SY2; 15.2(1)SY3; 15.2(2)E; 15.2(2)E1; 15.2(2)E2; 15.2(2)E3; 15.2(2)E4; 15.2(2)E5; 15.2(2)E5a; 15.2(2)E5b; 15.2(2)E6; 15.2(2)E7; 15.2(2)EA; 15.2(2)EA1; 15.2(2)EA2; 15.2(2)EA3; 15.2(2)EB; 15.2(2)EB1; 15.2(2)EB2; 15.2(2)GC; 15.2(2)SY; 15.2(2)SY1; 15.2(2)SY2; 15.2(2a)E1; 15.2(2a)E2; 15.2(2b)E; 15.2(3)E; 15.2(3)E1; 15.2(3)E2; 15.2(3)E3; 15.2(3)E4; 15.2(3)EA; 15.2(3)GC; 15.2(3)GC1; 15.2(3a)E; 15.2(3m)E2; 15.2(3m)E7; 15.2(3m)E8; 15.2(4)E; 15.2(4)E1; 15.2(4)E2; 15.2(4)E3; 15.2(4)E4; 15.2(4)E5; 15.2(4)EA; 15.2(4)EA1; 15.2(4)EA2; 15.2(4)EA3; 15.2(4)EA4; 15.2(4)EA5; 15.2(4)EA6; 15.2(4)EC1; 15.2(4)EC2; 15.2(4)GC; 15.2(4)GC2; 15.2(4)GC3; 15.2(4)JAZ1; 15.2(4)JN; 15.2(4)M; 15.2(4)M1; 15.2(4)M10; 15.2(4)M11; 15.2(4)M2; 15.2(4)M3; 15.2(4)M4; 15.2(4)M5; 15.2(4)M6; 15.2(4)M6a; 15.2(4)M6b; 15.2(4)M7; 15.2(4)M8; 15.2(4)M9; 15.2(4m)E1; 15.2(4m)E2; 15.2(4m)E3; 15.2(4n)E2; 15.2(4o)E2; 15.2(4o)E3; 15.2(4p)E1; 15.2(4q)E1; 15.2(4s)E1; 15.2(4s)E2; 15.2(5)E; 15.2(5)E1; 15.2(5)E2; 15.2(5)E2c; 15.2(5)EA; 15.2(5)EX; 15.2(5a)E; 15.2(5a)E1; 15.2(5b)E; 15.2(5c)E; 15.2(6)E; 15.2(6)E0a; 15.2(6)E0b; 15.2(6)E0c; 15.3(0)SY; 15.3(1)SY; 15.3(1)SY1; 15.3(1)SY2; 15.3(1)T; 15.3(1)T1; 15.3(1)T2; 15.3(1)T3; 15.3(1)T4; 15.3(2)T; 15.3(2)T1; 15.3(2)T2; 15.3(2)T3; 15.3(2)T4; 15.3(3)JA11; 15.3(3)JA12; 15.3(3)JAA11; 15.3(3)JAA12; 15.3(3)JC14; 15.3(3)JC8; 15.3(3)JC9; 15.3(3)JCA7; 15.3(3)JCA8; 15.3(3)JCA9; 15.3(3)JD11; 15.3(3)JD12; 15.3(3)JD13; 15.3(3)JD14; 15.3(3)JD16; 15.3(3)JD17; 15.3(3)JD6; 15.3(3)JD7; 15.3(3)JD8; 15.3(3)JD9; 15.3(3)JDA11; 15.3(3)JDA12; 15.3(3)JDA13; 15.3(3)JDA14; 15.3(3)JDA16; 15.3(3)JDA17; 15.3(3)JDA7; 15.3(3)JDA8; 15.3(3)JDA9; 15.3(3)JE; 15.3(3)JF; 15.3(3)JF1; 15.3(3)JF10; 15.3(3)JF11; 15.3(3)JF12; 15.3(3)JF12i; 15.3(3)JF14; 15.3(3)JF14i; 15.3(3)JF15; 15.3(3)JF2; 15.3(3)JF4; 15.3(3)JF5; 15.3(3)JF6; 15.3(3)JF7; 15.3(3)JF8; 15.3(3)JF9; 15.3(3)JG; 15.3(3)JG1; 15.3(3)JH; 15.3(3)JH1; 15.3(3)JI1; 15.3(3)JI3; 15.3(3)JI4; 15.3(3)JI5; 15.3(3)JI6; 15.3(3)JJ; 15.3(3)JJ1; 15.3(3)JK; 15.3(3)JK1; 15.3(3)JK10; 15.3(3)JK11; 15.3(3)JK1t; 15.3(3)JK2; 15.3(3)JK2a; 15.3(3)JK3; 15.3(3)JK4; 15.3(3)JK5; 15.3(3)JK6; 15.3(3)JK7; 15.3(3)JK8; 15.3(3)JK8a; 15.3(3)JK8b; 15.3(3)JK9; 15.3(3)JN11; 15.3(3)JN13; 15.3(3)JN14; 15.3(3)JN15; 15.3(3)JNP3; 15.3(3)JPC5; 15.3(3)JPI; 15.3(3)JPI1; 15.3(3)JPI10; 15.3(3)JPI1t; 15.3(3)JPI4; 15.3(3)JPI5; 15.3(3)JPI5s; 15.3(3)JPI6a; 15.3(3)JPI7; 15.3(3)JPI8a; 15.3(3)JPI9; 15.3(3)JPJ; 15.3(3)JPJ10; 15.3(3)JPJ11; 15.3(3)JPJ2; 15.3(3)JPJ2t; 15.3(3)JPJ3; 15.3(3)JPJ3a; 15.3(3)JPJ4; 15.3(3)JPJ5; 15.3(3)JPJ6; 15.3(3)JPJ7; 15.3(3)JPJ7c; 15.3(3)JPJ8a; 15.3(3)JPJ9; 15.3(3)JPK; 15.3(3)JPK1; 15.3(3)JPK2; 15.3(3)JPK3; 15.3(3)JPK4; 15.3(3)JPK5; 15.3(3)JPK6; 15.3(3)JPK7; 15.3(3)JPK8; 15.3(3)JPK9; 15.3(3)JPL; 15.3(3)JPM; 15.3(3)JPN; 15.3(3)JPN1; 15.3(3)JPN2; 15.3(3)JPN3; 15.3(3)JPN4; 15.3(3)JPN5; 15.3(3)JPN6; 15.3(3)JPN7; 15.3(3)JPN8; 15.3(3)JPO; 15.3(3)JPP; 15.3(3)JPQ; 15.3(3)JPQ1; 15.3(3)JPQ2; 15.3(3)JPQ3; 15.3(3)JPQ4; 15.3(3)JPQ5; 15.3(3)JPQ6a; 15.3(3)JPR; 15.3(3)JPR1; 15.3(3)JPS; 15.3(3)JPT; 15.3(3)JPT1; 15.3(3)JPT2; 15.3(3)JPT3; 15.3(3)JPT4; 15.3(3)M; 15.3(3)M1; 15.3(3)M2; 15.3(3)M3; 15.3(3)M4; 15.3(3)M5; 15.3(3)M6; 15.3(3)M7; 15.3(3)M8; 15.3(3)M8a; 15.3(3)M9; 15.3(3)XB12; 15.4(1)CG1; 15.4(1)SY; 15.4(1)SY1; 15.4(1)T; 15.4(1)T1; 15.4(1)T2; 15.4(1)T3; 15.4(1)T4; 15.4(2)CG; 15.4(2)T; 15.4(2)T1; 15.4(2)T2; 15.4(2)T3; 15.4(2)T4; 15.4(3)M; 15.4(3)M1; 15.4(3)M2; 15.4(3)M3; 15.4(3)M4; 15.4(3)M5; 15.5(1)T; 15.5(1)T1; 15.5(1)T2; 15.5(1)T3; 15.5(1)T4; 15.5(2)T; 15.5(2)T1; 15.5(2)T2; 15.5(2)T3; 15.5(2)T4; 15.5(2)XB; 15.5(3)M; 15.5(3)M0a; 15.5(3)M1; 15.5(3)M2; 15.5(3)M2a; 15.6(1)T; 15.6(1)T0a; 15.6(1)T1; 15.6(2)S0a; 15.6(2)T; 15.6(2)T0a","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99512,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2018-03-28T16:00:00Z","updated_at":"2025-08-20T14:26:26Z","advisory_updated_at":"2025-08-20T14:26:26Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"},"row_display_order":1},{"product":{"name":"Cisco IOS XE Software","slug":"cisco-ios-xe-software","vendor":"Cisco"},"advisory":{"id":"cisco-sa-20180328-smi2","slug":"cisco-sa-20180328-smi2","title":"Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T01:36:11Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"16.1.1; 16.1.2; 16.1.3; 16.2.1; 16.2.2; 16.3.1; 16.3.1a; 16.3.2; 16.3.4; 16.3.5; 16.3.5b; 16.4.1; 16.5.1; 16.5.1a; 16.6.1; 16.6.10; 16.6.2; 16.6.3; 16.6.4; 16.6.4a; 16.6.4s; 16.6.5; 16.6.5a; 16.6.5b; 16.6.6; 16.6.7; 16.6.7a; 16.6.8; 16.6.9; 16.7.1; 16.7.1a; 16.7.1b; 16.7.2; 16.7.3; 16.7.4; 16.8.1; 16.8.1a; 16.8.1b; 16.8.1c; 16.8.1d; 16.8.1e; 16.8.1s; 16.8.2; 16.8.3; 16.9.1a; 16.9.1b; 16.9.1c; 16.9.1d; 16.9.1s; 16.9.2a; 16.9.2s; 16.9.3a; 16.9.3h; 16.9.3s; 16.9.4c; 16.9.5; 16.9.5f; 16.9.6; 16.9.7; 16.9.8; 16.9.8a; 16.9.8b; 3.10.0E; 3.10.0cE; 3.2.0SE; 3.2.1SE; 3.2.2SE; 3.2.3SE; 3.3.0SE; 3.3.1SE; 3.3.2SE; 3.3.3SE; 3.3.4SE; 3.3.5SE; 3.4.0SG; 3.4.1SG; 3.4.2SG; 3.4.3SG; 3.4.4SG; 3.4.5SG; 3.4.6SG; 3.4.7SG; 3.4.8SG; 3.5.0E; 3.5.1E; 3.5.2E; 3.5.3E; 3.6.0E; 3.6.0bE; 3.6.1E; 3.6.3E; 3.6.4E; 3.6.5E; 3.6.5aE; 3.6.5bE; 3.6.6E; 3.6.7E; 3.6.7aE; 3.6.7bE; 3.7.0E; 3.7.1E; 3.7.2E; 3.7.3E; 3.7.4E; 3.7.5E; 3.8.0E; 3.8.1E; 3.8.2E; 3.8.3E; 3.8.4E; 3.8.5E; 3.8.5aE; 3.9.0E; 3.9.1E; 3.9.2E; 3.9.2bE","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99512,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2018-03-28T16:00:00Z","updated_at":"2025-08-20T14:26:26Z","advisory_updated_at":"2025-08-20T14:26:26Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"},"row_display_order":2},{"product":{"name":"Cisco Adaptive Security Appliance (ASA) Software","slug":"cisco-adaptive-security-appliance-asa-software","vendor":"Cisco"},"advisory":{"id":"cisco-sa-20180328-smi2","slug":"cisco-sa-20180328-smi2","title":"Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T01:36:11Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"16.3.3","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99512,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2018-03-28T16:00:00Z","updated_at":"2025-08-20T14:26:26Z","advisory_updated_at":"2025-08-20T14:26:26Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"},"row_display_order":3},{"product":{"name":"Cisco IOS XE Catalyst SD-WAN","slug":"cisco-ios-xe-catalyst-sd-wan","vendor":"Cisco"},"advisory":{"id":"cisco-sa-20180328-smi2","slug":"cisco-sa-20180328-smi2","title":"Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T01:36:11Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"16.9.3; 16.9.4","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.99512,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2018-03-28T16:00:00Z","updated_at":"2025-08-20T14:26:26Z","advisory_updated_at":"2025-08-20T14:26:26Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2"},"row_display_order":4}]}