Live › vulnerability › CVE-2018-0167
Go to dashboardA buffer overflow in the LLDP subsystem of Cisco IOS, IOS XE and IOS XR lets a nearby attacker crash the device or run arbitrary code on it. No login is needed, and CISA lists it as exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Cisco IOS, XR, and XE Software | vendor | – | – |
Unknown from the sources.
no lldp run as a stopgap (unverified in sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCuo17183, CSCvd73487.
This page as .md · .json · in your agent: get_signal("CVE-2018-0167")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.