CVE-2018-0175

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://nvd.nist.gov/vuln/detail/CVE-2018-0175

Remediation deadline: March 17, 2022

Description

Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device.

Timeline

Published:March 3rd, 2022 12:00 AM

Last modified:March 3rd, 2022 12:00 AM

Added to KEV:March 3rd, 2022

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Cisco

Products

IOS, XR, and XE Software

Weaknesses (CWE)

CWE-119

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute