CVE-2018-0167 KEV
8.8
HIGH · CVSS 3.1 · EPSS 3.4% (pctl 88)
Patch first
On CISA KEV — known exploited in the wild, due 2022-03-17.
Description
Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCuo17183, CSCvd73487.
Scoring
| CVSS | 8.8 (HIGH, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 3.35% — more likely to be exploited than 88% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | yes — remediate by 2022-03-17 |
| Public exploit | none known |
| Published | 2018-03-28 |
| Last modified | 2026-06-17 |
CISA KEV
| Name | Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability |
|---|---|
| Added | 2022-03-03 |
| Due | 2022-03-17 |
| Vendor / product | Cisco / IOS, XR, and XE Software |
| Ransomware use | none reported |
Affected (18)
| Vendor | Product |
|---|---|
| cisco | asr 9001 |
| cisco | asr 9006 |
| cisco | asr 9010 |
| cisco | asr 9904 |
| cisco | asr 9906 |
| cisco | asr 9910 |
| cisco | asr 9912 |
| cisco | asr 9922 |
| cisco | ios |
| cisco | ios xe |
| cisco | ios xr |
| rockwellautomation | allen-bradley armorstratix 5700 |
| rockwellautomation | allen-bradley stratix 5400 |
| rockwellautomation | allen-bradley stratix 5410 |
| rockwellautomation | allen-bradley stratix 5700 |
| rockwellautomation | allen-bradley stratix 5900 |
| rockwellautomation | allen-bradley stratix 8000 |
| rockwellautomation | allen-bradley stratix 8300 |
References
- http://www.securityfocus.com/bid/103564
- http://www.securitytracker.com/id/1040586
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp
- http://www.securityfocus.com/bid/103564
- http://www.securitytracker.com/id/1040586
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0167
→ the Explorer · watch your stack · NVD