CVE-2018-0167
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
3.4%
88.1th percentile
CISA KEV
Listed
Added 2022-03-03 · patch by 2022-03-17
Weakness / dates
—
Published — · modified —
Timeline
- 2022-03-03 — Added to CISA KEV (actively exploited)
- 2022-03-17 — CISA patch-by deadline
Description
There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code.