Back to CVE Browser

CVE-2018-0175

Known Exploited (CISA KEV)HIGH

8.0

CVSS Severity Score

EPSS Score65.4690%

EPSS Percentile85.67th

PublishedMar 28, 2018

Last ModifiedJan 14, 2026

Vulnerability Description

Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCvd73664.

Affected Platforms (CPE)

💻

Cisco

Ios

= 15.4\(3\)m4.1

💻

Cisco

Ios Xe

= 15.4\(3\)m4.1

💻

Cisco

Ios Xr

= 15.4\(3\)m4.1

💻

Cisco

Ios

<= 15.2\(4a\)ea5

💻

Cisco

Ios Xe

<= 15.2\(4a\)ea5

💻

Cisco

Ios

<= 15.2\(6\)e0a

💻

Cisco

Ios Xe

<= 15.2\(6\)e0a

💻

Cisco

Ios

<= 15.6.3m1

💻

Cisco

Ios Xe

<= 15.6.3m1

References & Advisories

🔗 http://www.securityfocus.com/bid/103564

🔗 http://www.securitytracker.com/id/1040586

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04

🔗 https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05

🔗 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp

🔗 http://www.securityfocus.com/bid/103564

🔗 http://www.securitytracker.com/id/1040586

Related Vulnerabilities

CVE-2019-1264310.0

A vulnerability in the Cisco REST API virtual service container for Cisco IOS XE Software could allow an unauthenticated, remote a...

CVE-2018-431010.0

An access issue was addressed with additional sandbox restrictions. This issue affected versions prior to iOS 12, macOS Mojave 10....

CVE-2019-623510.0

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12...

CVE-2019-1106310.0

A broken access control vulnerability in SmartHome app (Android versions up to 3.0.42_190515, ios versions up to 2.0.22) allows an...