Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

About Cisco IOS & IOS XE Software Smart Install Issues

[Hong Kong, April 9, 2018]Cisco puts the security of our customers first. When we identify a potential vulnerability in products, we are transparent and will issue a Security Advisory to make sure customers know what the issue is and how to remediate it. Cisco maintains a very open relationship with the security community, and we view this as vital to protecting our customers’ networks. Our effort has been highly recognized by customers globally.

Cisco recently published blogs and a security response page alerting our customers about the precaution needed to avoid possible abuse of the Smart Install feature. Administrators should either

A. disable the feature if it is not needed, or

B. apply appropriate security controls to the device as part of the installation and configuration process.

Please refer to the below two Cisco Security Advisories for details.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-smi2

If you have any inquiry, please contact our TAC hotline if you hold a valid Cisco service agreement, or contact your Cisco Account Manager and partners to address the issue.

Thank you for your continuous support to Cisco.