Description
Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCvd73664.
Published: 2018-03-28
Score: 8 High
EPSS: 2.9% Low
KEV: Yes
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2018-0998 Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCvd73664.
History

Wed, 22 Oct 2025 00:15:00 +0000


Tue, 21 Oct 2025 20:30:00 +0000


Tue, 21 Oct 2025 19:30:00 +0000


Wed, 13 Nov 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-03-03'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Subscriptions

Cisco Ios Ios Xe Ios Xr
Rockwellautomation Allen-bradley Armorstratix 5700 Allen-bradley Stratix 5400 Allen-bradley Stratix 5410 Allen-bradley Stratix 5700 Allen-bradley Stratix 5900 Services Router Allen-bradley Stratix 8000 Allen-bradley Stratix 8300 Industrial Managed Ethernet Switch
cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2026-01-12T22:02:18.981Z

Reserved: 2017-11-27T00:00:00.000Z

Link: CVE-2018-0175

cve-icon Vulnrichment

Updated: 2024-08-05T03:14:17.061Z

cve-icon NVD

Status : Analyzed

Published: 2018-03-28T22:29:01.280

Modified: 2026-01-14T18:46:12.233

Link: CVE-2018-0175

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses