CyberSecBulletin

Cisco IOS, IOS XE, and IOS XR vulnerabilities

We track 2 vulnerabilities in Cisco IOS, IOS XE, and IOS XR products. 2 are rated high or critical, and 2 have been exploited in real attacks. The most recent was published on March 28, 2018.

2vulnerabilities
0critical
2high
2exploited
8.4average CVSS score

Latest Cisco IOS, IOS XE, and IOS XR vulnerabilities

  • 8.0 High severity

    Cisco IOS, XR, and XE Software Buffer Overflow Exploited

    CVE-2018-0175Cisco IOS, IOS XE, and IOS XREPSS 3.48%

    Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute

  • 8.8 High severity

    Cisco IOS, XR, and XE Software Buffer Overflow Exploited

    CVE-2018-0167Cisco IOS, IOS XE, and IOS XREPSS 3.35%

    Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) conditio