Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

HIGH 8.0EXPLOITED (CISA KEV)CVE-2018-0175 · Published 28/03/2018 · updated 17/06/2026

Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/03/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
IOS, XR, and XE Software Cisco	Versions not published yet (product named by CISA KEV)

Description

Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCvd73664.

References

securityfocus.com/bid/103564 · Broken Link
securitytracker.com/id/1040586 · Broken Link
ics-cert.us-cert.gov/advisories/ICSA-18-107-03 · Third Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-18-107-04 · Third Party Advisory
ics-cert.us-cert.gov/advisories/ICSA-18-107-05 · Third Party Advisory
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2018-0175

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free