CVE-2018-0175: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
First published: Wed Mar 28 2018(Updated: )
Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device.
Credit: ykramarz@cisco.com ykramarz@cisco.com psirt@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS, XR, and XE Software | ||
| Cisco IOS | =15.4\(3\)m4.1 | |
| Cisco IOS XE | =15.4\(3\)m4.1 | |
| Cisco IOS XRv 9000 | =15.4\(3\)m4.1 | |
| Rockwell Automation Allen-Bradley ArmorStratix 5700 | ||
| Rockwell Automation Allen-Bradley Stratix 5400 | ||
| Allen-Bradley Stratix 5410 | ||
| Rockwell Automation Allen-Bradley Stratix 5700 | ||
| Rockwellautomation Allen-bradley Stratix 5900 Services Router | ||
| Rockwell Automation Allen-Bradley Stratix 8000 | ||
| All of | ||
| Any of | ||
| Cisco IOS | <=15.2\(4a\)ea5 | |
| Cisco IOS XE | <=15.2\(4a\)ea5 | |
| Rockwell Automation Allen-Bradley Stratix 8300 | ||
| All of | ||
| Any of | ||
| Cisco IOS | <=15.2\(6\)e0a | |
| Cisco IOS XE | <=15.2\(6\)e0a | |
| Any of | ||
| Rockwell Automation Allen-Bradley ArmorStratix 5700 | ||
| Rockwell Automation Allen-Bradley Stratix 5400 | ||
| Allen-Bradley Stratix 5410 | ||
| Rockwell Automation Allen-Bradley Stratix 5700 | ||
| Rockwell Automation Allen-Bradley Stratix 8000 | ||
| All of | ||
| Any of | ||
| Cisco IOS | <=15.6.3m1 | |
| Cisco IOS XE | <=15.6.3m1 | |
| Rockwellautomation Allen-bradley Stratix 5900 Services Router |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/103564
- http://www.securitytracker.com/id/1040586
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-04
- https://ics-cert.us-cert.gov/advisories/ICSA-18-107-05
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp
- https://nvd.nist.gov/vuln/detail/CVE-2018-0175
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-0175.
What is the severity of CVE-2018-0175?
The severity of CVE-2018-0175 is high with a severity value of 8.
What is the affected software for CVE-2018-0175?
The affected software for CVE-2018-0175 is Cisco IOS, XR, and XE Software version 15.4(3)m4.1.
How can an unauthenticated attacker exploit CVE-2018-0175?
An unauthenticated attacker can exploit CVE-2018-0175 by sending malicious requests to the Link Layer Discovery Protocol (LLDP) subsystem.
Are there any known references for CVE-2018-0175?
Yes, there are references available for CVE-2018-0175. You can find them at the following URLs: [Reference 1](http://www.securityfocus.com/bid/103564), [Reference 2](http://www.securitytracker.com/id/1040586), [Reference 3](https://ics-cert.us-cert.gov/advisories/ICSA-18-107-03).
- agent/type
- agent/description
- agent/weakness
- agent/title
- agent/severity
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/tags
- agent/author
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-cve
- source/NVD
- collector/nvd-api
- vendor/cisco
- canonical/cisco ios, xr, and xe software
- canonical/cisco ios
- version/cisco ios/15.4\(3\)m4.1
- canonical/cisco ios xe
- version/cisco ios xe/15.4\(3\)m4.1
- canonical/cisco ios xrv 9000
- version/cisco ios xrv 9000/15.4\(3\)m4.1
- vendor/rockwellautomation
- canonical/rockwell automation allen-bradley armorstratix 5700
- canonical/rockwell automation allen-bradley stratix 5400
- canonical/allen-bradley stratix 5410
- canonical/rockwell automation allen-bradley stratix 5700
- canonical/rockwellautomation allen-bradley stratix 5900 services router
- canonical/rockwell automation allen-bradley stratix 8000
- version/cisco ios/15.2\(4a\)ea5
- version/cisco ios xe/15.2\(4a\)ea5
- canonical/rockwell automation allen-bradley stratix 8300
- version/cisco ios/15.2\(6\)e0a
- version/cisco ios xe/15.2\(6\)e0a
- version/cisco ios/15.6.3m1
- version/cisco ios xe/15.6.3m1