{"id":"CVE-2018-0175","kind":"vulnerability","aliases":["CVE-2018-0175"],"related":[],"title":"Cisco IOS, XR, and XE Software: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","description":"Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device.\n\nCISA required action: Apply updates per vendor instructions.","summary":"Cisco IOS, IOS XE and IOS XR have a format string bug in their LLDP (Link Layer Discovery Protocol) handling. An unauthenticated attacker on the same network segment can crash the device or run code with elevated privileges.","severity":"high","cvss":8.0,"epss":0.03478,"exploited":true,"exploited_at":"2022-03-03T00:00:00+00:00","products":[{"name":"Cisco IOS, XR, and XE Software","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["cisco","exploited","infrastructure","ios","ios-xe","ios-xr","network-gear"],"not_affected_if":["lldp-disabled","not-cisco"],"how_to_check":null,"fix":"Apply the Cisco updates per vendor instructions (CISA KEV required action); the fixed version numbers are not in the sources.","status":"open","published_at":"2018-03-28T22:29:01+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:24:20+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-23T21:24:20Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Cisco updates per vendor instructions (CISA KEV required action); the fixed version numbers are not in the sources.","reach":"network","impact":"high","summary":"Cisco IOS, IOS XE and IOS XR have a format string bug in their LLDP (Link Layer Discovery Protocol) handling. An unauthenticated attacker on the same network segment can crash the device or run code with elevated privileges.","category":"infrastructure","who_cares":["cisco","ios","ios-xe","ios-xr","network-gear"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker runs code with elevated privileges on the network device","analyst_note":"Find the Cisco advisory for CVE-2018-0175 for affected versions, fixed releases and the LLDP-disabled workaround; the sources here do not give them.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["lldp-disabled","not-cisco"],"user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.00048,"input_tokens":2925,"output_tokens":374,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-0175':18A,21A '-2018':17A,20A 'action':130C 'adjac':107C 'affect':126C 'allow':104C 'and':25A 'appli':131C 'arbitrari':119C 'attack':63B,108C 'buffer':13A 'bug':52B 'caus':110C 'cisa':128C 'cisco':1A,7A,22A,28B,41B,91C,94C,99C 'code':75B,120C 'condit':116C 'could':103C 'crash':70B 'cve':16A,19A 'denial':112C 'devic':72B,127C 'discoveri':58B,86C 'dos':115C 'elev':77B,122C 'execut':118C 'exploit':29B 'format':50B,79C 'gear':40B 'handl':60B 'infrastructur':30B 'instruct':135C 'io':2A,8A,31B,33B,36B,42B,43B,46B,92C,95C,100C 'ios':23A 'ios-x':32B 'ios-xr':35B 'layer':57B,85C 'link':56B,84C 'lldp':55B,88C 'network':39B,67B 'network-gear':38B 'overflow':14A 'per':133C 'privileg':78B,123C 'protocol':59B,87C 'requir':129C 'run':74B 'segment':68B 'servic':114C 'softwar':6A,12A,93C,97C,102C 'software':27A 'string':51B,80C 'subsystem':89C 'unauthent':62B,106C 'updat':132C 'vendor':134C 'vulner':15A,81C 'xe':5A,11A,26A,34B,44B,96C 'xr':3A,9A,24A,37B,47B,101C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2018-03-28T22:29:01+00:00","kev":{"dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2018-0175","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0175","severity":null,"published_at":"2022-03-03T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T17:39:58+00:00","note":null},{"source":"epss","external_id":"CVE-2018-0175","url":"https://api.first.org/data/v1/epss?cve=CVE-2018-0175","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:44+00:00","fetched_at":"2026-10-23T19:13:44+00:00","note":null},{"source":"nvd","external_id":"CVE-2018-0175","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0175","severity":null,"published_at":"2018-03-28T22:29:01+00:00","modified_at":"2026-06-17T01:30:00+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}