{"id":"CVE-2018-0167","kind":"vulnerability","aliases":["CVE-2018-0167"],"related":[],"title":"Cisco IOS, XR, and XE Software: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","description":"Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCuo17183, CSCvd73487.","summary":"A buffer overflow in the LLDP subsystem of Cisco IOS, IOS XE and IOS XR lets a nearby attacker crash the device or run arbitrary code on it. No login is needed, and CISA lists it as exploited in the wild.","severity":"high","cvss":8.8,"epss":0.03354,"exploited":true,"exploited_at":"2022-03-03T00:00:00+00:00","products":[{"name":"Cisco IOS, XR, and XE Software","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["cisco","exploited","infrastructure","ios","ios-xe","ios-xr","network-gear"],"not_affected_if":["lldp-disabled","no-cisco-ios-devices"],"how_to_check":null,"fix":"Apply the Cisco IOS, IOS XE or IOS XR update named in the Cisco advisory for this CVE; the sources do not name the fixed versions.\nIf LLDP is not needed, disable it globally with 'no lldp run' as a stopgap (unverified in sources).","status":"open","published_at":"2018-03-28T22:29:00+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:26:19+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-10-23T21:26:19Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Cisco IOS, IOS XE or IOS XR update named in the Cisco advisory for this CVE; the sources do not name the fixed versions.\nIf LLDP is not needed, disable it globally with 'no lldp run' as a stopgap (unverified in sources).","reach":"network","impact":"high","summary":"A buffer overflow in the LLDP subsystem of Cisco IOS, IOS XE and IOS XR lets a nearby attacker crash the device or run arbitrary code on it. No login is needed, and CISA lists it as exploited in the wild.","category":"infrastructure","who_cares":["cisco","ios","ios-xe","ios-xr","network-gear"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs arbitrary code on the network device or crashes it.","analyst_note":"Find the fixed IOS, IOS XE and IOS XR versions and the exact LLDP exposure conditions in the Cisco security advisory for CVE-2018-0167 (search cisco.com security advisories).","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["lldp-disabled","no-cisco-ios-devices"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000519,"input_tokens":2920,"output_tokens":455,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-0167':18A,21A '-2018':17A,20A 'adjac':111C 'affect':130C 'allow':108C 'and':25A 'arbitrari':65B,123C 'attack':59B,112C 'buffer':13A,42B,83C 'bug':133C 'caus':114C 'cisa':74B 'cisco':1A,7A,22A,28B,49B,95C,98C,103C,132C 'code':66B,124C 'condit':120C 'could':107C 'crash':60B 'cscuo17183':135C 'cscvd73487':136C 'cve':16A,19A 'denial':116C 'devic':62B,131C 'discoveri':90C 'dos':119C 'elev':126C 'execut':122C 'exploit':29B,78B 'gear':40B 'id':134C 'infrastructur':30B 'io':2A,8A,31B,33B,36B,50B,51B,54B,96C,99C,104C 'ios':23A 'ios-x':32B 'ios-xr':35B 'layer':89C 'let':56B 'link':88C 'list':75B 'lldp':46B,92C 'login':70B 'multipl':82C 'nearbi':58B 'need':72B 'network':39B 'network-gear':38B 'overflow':14A,43B,84C 'privileg':127C 'protocol':91C 'run':64B 'servic':118C 'softwar':6A,12A,97C,101C,106C 'software':27A 'subsystem':47B,93C 'unauthent':110C 'vulner':15A,85C 'wild':81B 'xe':5A,11A,26A,34B,52B,100C 'xr':3A,9A,24A,37B,55B,105C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2018-03-28T22:29:00+00:00","kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2018-0167","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0167","severity":null,"published_at":"2022-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T17:39:58+00:00","note":null},{"source":"epss","external_id":"CVE-2018-0167","url":"https://api.first.org/data/v1/epss?cve=CVE-2018-0167","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2018-0167","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0167","severity":null,"published_at":"2018-03-28T22:29:00+00:00","modified_at":"2026-06-17T01:29:59+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}