{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T16:12:11Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","cve":{"id":"CVE-2018-0174","kev":true,"kev_added_at":"2022-03-03","epss":{"score":0.07758,"percentile":0.93984,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"}},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"advisory_count":1,"visible_product_count":2,"public_evidence_count":2,"kev":true},"advisories":[{"id":"cisco-sa-20180328-dhcpr3","slug":"cisco-sa-20180328-dhcpr3","title":"Cisco IOS and IOS XE Software DHCP Version 4 Relay Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3"}],"public_evidence":[{"product":{"name":"Cisco IOS","slug":"cisco-ios","vendor":"Cisco"},"advisory":{"id":"cisco-sa-20180328-dhcpr3","slug":"cisco-sa-20180328-dhcpr3","title":"Cisco IOS and IOS XE Software DHCP Version 4 Relay Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T03:55:23Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"12.2(33)MRA; 12.2(33)MRB; 12.2(33)MRB1; 12.2(33)MRB2; 12.2(33)MRB3; 12.2(33)MRB4; 12.2(33)MRB5; 12.2(33)MRB6; 12.2(33)SRD; 12.2(33)SRD1; 12.2(33)SRD2; 12.2(33)SRD2a; 12.2(33)SRD3; 12.2(33)SRD4; 12.2(33)SRD4a; 12.2(33)SRD5; 12.2(33)SRD6; 12.2(33)SRD7; 12.2(33)SRD8; 12.2(33)SRE; 12.2(33)SRE0a; 12.2(33)SRE1; 12.2(33)SRE2; 12.2(33)SRE3; 12.2(33)SRE4; 12.2(33)SRE5; 12.2(33)SRE6; 12.2(33)SRE7; 12.2(33)SRE7a; 12.2(33)SRE8; 12.2(33)SRE9; 12.2(33)SRE9a; 12.2(33)ZI; 12.2(33)ZZ; 12.2(44)EX; 12.2(44)EX1; 12.2(44)EY; 12.2(44)SE; 12.2(44)SE1; 12.2(44)SE2; 12.2(44)SE3; 12.2(44)SE4; 12.2(44)SE5; 12.2(44)SE6; 12.2(46)EX; 12.2(46)EY; 12.2(46)SE; 12.2(46)SE1; 12.2(46)SE2; 12.2(46)SG; 12.2(46)SG1; 12.2(50)SE; 12.2(50)SE1; 12.2(50)SE2; 12.2(50)SE3; 12.2(50)SE4; 12.2(50)SE5; 12.2(50)SG; 12.2(50)SG1; 12.2(50)SG2; 12.2(50)SG3; 12.2(50)SG4; 12.2(50)SG5; 12.2(50)SG6; 12.2(50)SG7; 12.2(50)SG8; 12.2(50)SQ; 12.2(50)SQ1; 12.2(50)SQ2; 12.2(50)SQ3; 12.2(50)SQ4; 12.2(50)SQ5; 12.2(50)SQ6; 12.2(50)SQ7; 12.2(52)EX; 12.2(52)EX1; 12.2(52)EY; 12.2(52)EY1; 12.2(52)EY1a; 12.2(52)EY1b; 12.2(52)EY1c; 12.2(52)EY2; 12.2(52)EY2a; 12.2(52)EY3; 12.2(52)EY3a; 12.2(52)EY4; 12.2(52)SE; 12.2(52)SE1; 12.2(52)SG; 12.2(52)XO; 12.2(53)EX; 12.2(53)EY; 12.2(53)EZ; 12.2(53)SE; 12.2(53)SE1; 12.2(53)SE2; 12.2(53)SG; 12.2(53)SG1; 12.2(53)SG10; 12.2(53)SG11; 12.2(53)SG2; 12.2(53)SG3; 12.2(53)SG4; 12.2(53)SG5; 12.2(53)SG6; 12.2(53)SG7; 12.2(53)SG8; 12.2(53)SG9; 12.2(54)SE; 12.2(54)SG; 12.2(54)SG1; 12.2(54)WO; 12.2(54)XO; 12.2(55)EX; 12.2(55)EX1; 12.2(55)EX2; 12.2(55)EX3; 12.2(55)EY; 12.2(55)EZ; 12.2(55)SE; 12.2(55)SE1; 12.2(55)SE10; 12.2(55)SE11; 12.2(55)SE12; 12.2(55)SE2; 12.2(55)SE3; 12.2(55)SE4; 12.2(55)SE5; 12.2(55)SE6; 12.2(55)SE7; 12.2(55)SE8; 12.2(55)SE9; 12.2(58)EX; 12.2(58)EY; 12.2(58)EY1; 12.2(58)EY2; 12.2(58)EZ; 12.2(58)SE; 12.2(58)SE1; 12.2(58)SE2; 12.2(60)EZ; 12.2(60)EZ1; 12.2(60)EZ10; 12.2(60)EZ11; 12.2(60)EZ12; 12.2(60)EZ2; 12.2(60)EZ3; 12.2(60)EZ4; 12.2(60)EZ5; 12.2(60)EZ6; 12.2(60)EZ7; 12.2(60)EZ8; 12.2(60)EZ9; 15.0(1)EX; 15.0(1)EY; 15.0(1)EY1; 15.0(1)EY2; 15.0(1)MR; 15.0(1)S; 15.0(1)S1; 15.0(1)S2; 15.0(1)S3a; 15.0(1)S4; 15.0(1)S4a; 15.0(1)S5; 15.0(1)S6; 15.0(1)SE; 15.0(1)SE1; 15.0(1)SE2; 15.0(1)SE3; 15.0(1)XO; 15.0(1)XO1; 15.0(2)EA; 15.0(2)EA1; 15.0(2)EJ; 15.0(2)EJ1; 15.0(2)EK; 15.0(2)EK1; 15.0(2)EX; 15.0(2)EX1; 15.0(2)EX10; 15.0(2)EX11; 15.0(2)EX12; 15.0(2)EX13; 15.0(2)EX2; 15.0(2)EX3; 15.0(2)EX4; 15.0(2)EX5; 15.0(2)EX6; 15.0(2)EX7; 15.0(2)EX8; 15.0(2)EY; 15.0(2)EY1; 15.0(2)EY2; 15.0(2)EY3; 15.0(2)EZ; 15.0(2)MR; 15.0(2)SE; 15.0(2)SE1; 15.0(2)SE10; 15.0(2)SE10a; 15.0(2)SE11; 15.0(2)SE2; 15.0(2)SE3; 15.0(2)SE4; 15.0(2)SE5; 15.0(2)SE6; 15.0(2)SE7; 15.0(2)SE8; 15.0(2)SE9; 15.0(2)SG; 15.0(2)SG1; 15.0(2)SG10; 15.0(2)SG11; 15.0(2)SG11a; 15.0(2)SG2; 15.0(2)SG3; 15.0(2)SG4; 15.0(2)SG5; 15.0(2)SG6; 15.0(2)SG7; 15.0(2)SG8; 15.0(2)SG9; 15.0(2)SQD; 15.0(2)SQD1; 15.0(2)SQD2; 15.0(2)SQD3; 15.0(2)SQD4; 15.0(2)SQD5; 15.0(2)SQD6; 15.0(2)SQD7; 15.0(2)XO; 15.0(2a)EX5; 15.0(2a)SE9; 15.1(1)S; 15.1(1)S1; 15.1(1)S2; 15.1(1)SG; 15.1(1)SG1; 15.1(1)SG2; 15.1(2)S; 15.1(2)S1; 15.1(2)S2; 15.1(2)SG; 15.1(2)SG1; 15.1(2)SG2; 15.1(2)SG3; 15.1(2)SG4; 15.1(2)SG5; 15.1(2)SG6; 15.1(2)SG7; 15.1(2)SG8; 15.1(3)MRA; 15.1(3)MRA1; 15.1(3)MRA2; 15.1(3)MRA3; 15.1(3)MRA4; 15.1(3)S; 15.1(3)S0a; 15.1(3)S1; 15.1(3)S2; 15.1(3)S3; 15.1(3)S4; 15.1(3)S5; 15.1(3)S5a; 15.1(3)S6; 15.1(3)S7; 15.1(3)SVB1; 15.1(3)SVB2; 15.1(3)SVD; 15.1(3)SVD1; 15.1(3)SVD2; 15.1(3)SVD3; 15.1(3)SVE; 15.1(3)SVF; 15.1(3)SVF1; 15.1(3)SVF2; 15.1(3)SVF2a; 15.1(3)SVF4b; 15.1(3)SVF4c; 15.1(3)SVF4d; 15.1(3)SVF4e; 15.1(3)SVF4f; 15.1(3)SVG; 15.1(3)SVG1a; 15.1(3)SVG1b; 15.1(3)SVG1c; 15.1(3)SVG2; 15.1(3)SVG2a; 15.1(3)SVG3; 15.1(3)SVG3a; 15.1(3)SVG3b; 15.1(3)SVG3c; 15.1(3)SVH; 15.1(3)SVH2; 15.1(3)SVH4; 15.1(3)SVH4a; 15.1(3)SVI1a; 15.1(3)SVI2; 15.1(3)SVI2a; 15.1(3)SVI3; 15.1(3)SVI31a; 15.1(3)SVI31b; 15.1(3)SVI3b; 15.1(3)SVI3c; 15.1(3)SVJ; 15.1(3)SVJ2; 15.1(3)SVR1; 15.1(3)SVR10; 15.1(3)SVR2; 15.1(3)SVR3; 15.1(3)SVS; 15.1(3)SVS1; 15.1(3)SVT1; 15.1(3)SVT2; 15.1(3)SVT3; 15.1(3)SVT4; 15.1(3)SVU1; 15.1(3)SVU10; 15.1(3)SVU11; 15.1(3)SVU2; 15.1(3)SVU20; 15.1(3)SVU21; 15.1(3)SVV1; 15.1(3)SVV2; 15.1(3)SVV3; 15.1(3)SVV4; 15.1(3)SVW; 15.1(3)SVW1; 15.1(3)SVX; 15.1(3)SVX1; 15.2(1)E; 15.2(1)E1; 15.2(1)E2; 15.2(1)E3; 15.2(1)EY; 15.2(1)S; 15.2(1)S1; 15.2(1)S2; 15.2(1)SC1a; 15.2(1)SD1; 15.2(1)SD2; 15.2(1)SD3; 15.2(1)SD4; 15.2(1)SD6; 15.2(1)SD6a; 15.2(1)SD7; 15.2(1)SD8; 15.2(2)E; 15.2(2)E1; 15.2(2)E2; 15.2(2)E3; 15.2(2)E4; 15.2(2)E5; 15.2(2)E5a; 15.2(2)E5b; 15.2(2)E6; 15.2(2)E7; 15.2(2)E8; 15.2(2)EA; 15.2(2)EA1; 15.2(2)EA2; 15.2(2)EA3; 15.2(2)EB; 15.2(2)EB1; 15.2(2)EB2; 15.2(2)S; 15.2(2)S0a; 15.2(2)S0c; 15.2(2)S0d; 15.2(2)S1; 15.2(2)S2; 15.2(2)SC; 15.2(2)SC1; 15.2(2)SC3; 15.2(2)SC4; 15.2(2a)E1; 15.2(2a)E2; 15.2(2b)E; 15.2(3)E; 15.2(3)E1; 15.2(3)E2; 15.2(3)E3; 15.2(3)E4; 15.2(3)EA; 15.2(3a)E; 15.2(3m)E2; 15.2(3m)E7; 15.2(3m)E8; 15.2(4)E; 15.2(4)E1; 15.2(4)E2; 15.2(4)E3; 15.2(4)E4; 15.2(4)E5; 15.2(4)EA; 15.2(4)EA1; 15.2(4)EA2; 15.2(4)EA3; 15.2(4)EA4; 15.2(4)EA5; 15.2(4)EA6; 15.2(4)EC1; 15.2(4)EC2; 15.2(4)S; 15.2(4)S0c; 15.2(4)S1; 15.2(4)S1c; 15.2(4)S2; 15.2(4)S3; 15.2(4)S3a; 15.2(4)S4; 15.2(4)S4a; 15.2(4m)E1; 15.2(4m)E2; 15.2(4m)E3; 15.2(4n)E2; 15.2(4o)E2; 15.2(4o)E3; 15.2(4p)E1; 15.2(4q)E1; 15.2(4s)E1; 15.2(4s)E2; 15.2(5)E; 15.2(5)E1; 15.2(5)E2; 15.2(5)E2c; 15.2(5)EA; 15.2(5)EX; 15.2(5a)E; 15.2(5a)E1; 15.2(5b)E; 15.2(5c)E; 15.2(6)E; 15.2(6)E0a; 15.2(6)E0c; 15.3(1)S; 15.3(1)S1; 15.3(1)S1e; 15.3(1)S2; 15.3(2)S; 15.3(2)S1; 15.3(2)S2; 15.3(3)S; 15.3(3)S1; 15.3(3)S1a","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.07758,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2018-03-28T16:00:00Z","updated_at":"2022-12-15T22:19:57Z","advisory_updated_at":"2022-12-15T22:19:57Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3"},"row_display_order":1},{"product":{"name":"Cisco IOS XE Software","slug":"cisco-ios-xe-software","vendor":"Cisco"},"advisory":{"id":"cisco-sa-20180328-dhcpr3","slug":"cisco-sa-20180328-dhcpr3","title":"Cisco IOS and IOS XE Software DHCP Version 4 Relay Denial of Service Vulnerability","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T03:55:23Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"17.11.99SW; 3.10.0E; 3.10.0S; 3.10.0cE; 3.10.1S; 3.10.1xbS; 3.10.1xcS; 3.2.0SE; 3.2.0SG; 3.2.10SG; 3.2.11SG; 3.2.1SE; 3.2.1SG; 3.2.2SE; 3.2.2SG; 3.2.3SE; 3.2.3SG; 3.2.4SG; 3.2.5SG; 3.2.6SG; 3.2.7SG; 3.2.8SG; 3.2.9SG; 3.3.0SE; 3.3.0SG; 3.3.0SQ; 3.3.1SE; 3.3.1SG; 3.3.1SQ; 3.3.2SE; 3.3.2SG; 3.3.3SE; 3.3.4SE; 3.3.5SE; 3.4.0SG; 3.4.0SQ; 3.4.1SG; 3.4.1SQ; 3.4.2SG; 3.4.3SG; 3.4.4SG; 3.4.5SG; 3.4.6SG; 3.4.7SG; 3.4.8SG; 3.5.0E; 3.5.0SQ; 3.5.1E; 3.5.1SQ; 3.5.2E; 3.5.2SQ; 3.5.3E; 3.5.3SQ; 3.5.4SQ; 3.5.5SQ; 3.5.6SQ; 3.5.7SQ; 3.6.0E; 3.6.0aE; 3.6.0bE; 3.6.1E; 3.6.2E; 3.6.2aE; 3.6.3E; 3.6.4E; 3.6.5E; 3.6.5aE; 3.6.5bE; 3.6.6E; 3.6.7E; 3.6.7aE; 3.6.7bE; 3.6.8E; 3.7.0E; 3.7.0S; 3.7.0bS; 3.7.0xaS; 3.7.0xbS; 3.7.1E; 3.7.1S; 3.7.1aS; 3.7.2E; 3.7.2S; 3.7.2tS; 3.7.3E; 3.7.3S; 3.7.4E; 3.7.4S; 3.7.4aS; 3.7.5E; 3.8.0E; 3.8.0S; 3.8.1E; 3.8.1S; 3.8.2E; 3.8.2S; 3.8.3E; 3.8.4E; 3.8.5E; 3.8.5aE; 3.9.0E; 3.9.0S; 3.9.0aS; 3.9.0xaS; 3.9.1E; 3.9.1S; 3.9.1aS; 3.9.2E; 3.9.2S; 3.9.2bE","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":true,"epss":{"score":0.07758,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2018-03-28T16:00:00Z","updated_at":"2022-12-15T22:19:57Z","advisory_updated_at":"2022-12-15T22:19:57Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-dhcpr3"},"row_display_order":2}]}