---
id: "CVE-2018-0175"
kind: "vulnerability"
aliases: ["CVE-2018-0175"]
title: "Cisco IOS, XR, and XE Software: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability"
severity: "high"
cvss: 8.0
epss: 0.03478
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Cisco IOS, XR, and XE Software", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["cisco", "exploited", "infrastructure", "ios", "ios-xe", "ios-xr", "network-gear"]
not_affected_if: ["lldp-disabled", "not-cisco"]
published_at: "2018-03-28T22:29:01+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0175", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-0175", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-0175", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Cisco IOS, XR, and XE Software: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

Cisco IOS, IOS XE and IOS XR have a format string bug in their LLDP (Link Layer Discovery Protocol) handling. An unauthenticated attacker on the same network segment can crash the device or run code with elevated privileges.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Cisco IOS, XR, and XE Software affected ? fixed ?

## Fix

Apply the Cisco updates per vendor instructions (CISA KEV required action); the fixed version numbers are not in the sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0175
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2018-0175
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2018-0175

## From the sources

Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device.

CISA required action: Apply updates per vendor instructions.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_