vulnwire
8.0high

CVE-2018-0175KEVin critical feed

Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco I…

Published 8 y ago · modified 4 mo ago · JSON

CVSS
8.0
v3.1 · CNA
CISA KEV
Yes
added 2022-03-03
EPSS
3.5%
percentile 89%
Public exploits
0
none known

Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCvd73664.

Known exploited (CISA KEV)

Added
4 y ago
Due date
2022-03-17 (4 y ago)
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Vendor / product
Cisco / IOS, XR, and XE Software
CISA name
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

CISA SSVC assessment

Exploitation
Active — exploited in the wild
Automatable
no
Technical impact
total
Assessed
23 mo ago

Exploit prediction (EPSS)

3.48% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
CISA ADP3.18.0CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD3.18.0CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CNA3.18.0CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD2.07.9AV:A/AC:M/Au:N/C:C/I:C/A:C

Affected products

  • n/a Cisco IOS, IOS XE, and IOS XR

Classification

Weakness
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
  • CWE-134 Use of Externally-Controlled Format String
Technology feeds
Cisco IOS (RSS, critical only)

References

  • tools.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp · x_refsource_CONFIRM, x_transferred
  • ics-cert.us-cert.gov /advisories/ICSA-18-107-03 · x_refsource_MISC, x_transferred
  • ics-cert.us-cert.gov /advisories/ICSA-18-107-04 · x_refsource_MISC, x_transferred
  • securitytracker.com /id/1040586 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • ics-cert.us-cert.gov /advisories/ICSA-18-107-05 · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/103564 · vdb-entry, x_refsource_BID, x_transferred
  • cisa.gov /known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0175 · government-resource

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.