CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco IOS / IOS XE / IOS XR LLDP Subsystem Format String Vulnerability (CVE-2018-0175) Technical Analysis and Hardening Guide
[Affected Scope] Cisco devices running Cisco IOS, IOS XE, or IOS XR Software with Link Layer Discovery Protocol (LLDP) enabled.
[Impact] An unauthenticated, adjacent attacker can send crafted LLDP packets to trigger a denial of service (DoS) or execute arbitrary code with elevated privileges.
[Mitigation] Apply official Cisco software updates immediately, or disable LLDP globally/per-interface as a temporary workaround.
Cisco IOS / IOS XE / IOS XR LLDP Subsystem Buffer Overflow Vulnerability (CVE-2018-0167)
[Affected Scope] Cisco IOS, IOS XE, and IOS XR Software with Link Layer Discovery Protocol (LLDP) enabled
[Impact] An unauthenticated, adjacent attacker could exploit this vulnerability to execute arbitrary code with elevated privileges or cause a denial of service (DoS) condition
[Mitigation] Apply official Cisco software updates or disable LLDP globally/per-interface as a temporary workaround