CVE-2018-0175

HIGHCISA KEV

8.0

Beschreibung

Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCvd73664.

CVE Details

CVSS v3.1 Bewertung8.0

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AngriffsvektorADJACENT_NETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionREQUIRED

Veroffentlicht3/28/2018

Zuletzt geandert1/14/2026

Quellekev

Honeypot-Sichtungen0

CISA KEV

HerstellerCisco

ProduktIOS, XR, and XE Software

SchwachstellennameCisco IOS, XR, and XE Software Buffer Overflow Vulnerability

KEV Aufnahmedatum2022-03-03

Behebungsfrist2022-03-17

Ransomware-NutzungUnknown

Betroffene Produkte

cisco:ioscisco:ios_xecisco:ios_xrrockwellautomation:allen-bradley_armorstratix_5700rockwellautomation:allen-bradley_stratix_5400rockwellautomation:allen-bradley_stratix_5410rockwellautomation:allen-bradley_stratix_5700rockwellautomation:allen-bradley_stratix_5900_services_routerrockwellautomation:allen-bradley_stratix_8000rockwellautomation:allen-bradley_stratix_8300_industrial_managed_ethernet_switch

Schwachen (CWE)

CWE-119CWE-134

Referenzen

http://www.securityfocus.com/bid/103564(psirt@cisco.com)

http://www.securitytracker.com/id/1040586(psirt@cisco.com)

https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03(psirt@cisco.com)

https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04(psirt@cisco.com)

https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05(psirt@cisco.com)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp(psirt@cisco.com)

http://www.securityfocus.com/bid/103564(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1040586(af854a3a-2127-422b-91ae-364da2661108)

https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03(af854a3a-2127-422b-91ae-364da2661108)

https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04(af854a3a-2127-422b-91ae-364da2661108)

https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05(af854a3a-2127-422b-91ae-364da2661108)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0175(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.