Vulnerability Intelligence Report
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
CVE-2018-0167
Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCuo17183, CSCvd73487.
CISA KEV
SSVC: Active Exploitation
CVSS Base Score
8.8
HIGH
Exploitability:2.9
Impact Score:5.9
EPSS Probability:3.45%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-119 ↗CWE-119
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| cisco | ios | 5.2.0.base |
| cisco | ios_xe | 5.2.0.base |
| cisco | ios_xr | all |
| cisco | asr_9001 | all |
| cisco | asr_9006 | all |
| cisco | asr_9010 | all |
| cisco | asr_9904 | all |
| cisco | asr_9906 | all |
| cisco | asr_9910 | all |
| cisco | asr_9912 | all |
| cisco | asr_9922 | all |
| rockwellautomation | allen-bradley_stratix_5900 | all |
| rockwellautomation | allen-bradley_armorstratix_5700 | all |
| rockwellautomation | allen-bradley_stratix_5400 | all |
| rockwellautomation | allen-bradley_stratix_5410 | all |
| rockwellautomation | allen-bradley_stratix_5700 | all |
| rockwellautomation | allen-bradley_stratix_8000 | all |
| rockwellautomation | allen-bradley_stratix_8300 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Cisco Systems, Inc. · Hosted Service · USA |
| Reserved | 2017-11-27T00:00:00 |
| Published | 2018-03-28T22:00:00 |
| Patch Date | 2018-03-28 |
| Last Updated | 2026-01-12T21:58:25 |
Community Chatter & Buzz