CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Mar 17, 2022

High

CISA KEV

CVE-2018-0175

Cisco—IOS, XR, and XE Software

Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device.

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2018-0175

Vulnerability Overview

Severity: High
CISA KEV: Yes
Ransomware: Unknown
Published: Mar 3, 2022
KEV Added: Mar 3, 2022
Due Date: Mar 17, 2022
Related Articles: 0

Vendor

Cisco

IOS, XR, and XE Software