CVE-2018-0167VulnerabilityPublished 03/03/2022Updated 10/24/2026

CVE-2018-0167: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability

Affects Cisco IOS, XR, and XE SoftwareSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/03/2022
KEV deadline: 03/17/2022
EPSS: 3.4% chance of exploitation in 30 days – higher than 88% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2018-0167 (opens in a new tab)

Description

CVE-2018-0167 is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS, IOS XE, and IOS XR software. An unauthenticated attacker adjacent to the vulnerable device could exploit this flaw to cause a denial of service or execute arbitrary code. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.

Summary

This vulnerability involves a buffer overflow in the LLDP subsystem of Cisco IOS, IOS XE, and IOS XR software. Exploitation by an unauthenticated adjacent attacker could lead to denial of service or arbitrary code execution. The vulnerability is tracked as CVE-2018-0167 and is associated with CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer). Known exploits exist in the wild, indicating active threat. No patch or remediation details are provided in the available data.

Impact

Successful exploitation can result in denial of service or arbitrary code execution on affected Cisco network devices. This could disrupt network operations or allow an attacker to gain control over the device. The vulnerability affects critical network infrastructure components, increasing the potential impact.

Mitigation

Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. Until a patch is applied, limit exposure by restricting access to the LLDP protocol from untrusted adjacent networks and monitor for exploitation attempts.

Weaknesses

CWE-119Buffer Errors (Memory Bounds) (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:40:53 UTC

Weaknesses

References

Related threats