Is CVE-2018-0167 actively exploited?

CVE-2018-0167 has no public evidence of in-the-wild exploitation as of 2026-01-12.

What is the CVSS score for CVE-2018-0167?

CVE-2018-0167 has a CVSS score of 8.8 (HIGH severity). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

How do I patch CVE-2018-0167?

Patch guidance is available from cisco security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2018-0167.

Fix CVE-2018-0167 - HIGH cisco ios

Q: Which products are affected by CVE-2018-0167?

9 products: cisco ios, cisco ios xe, cisco ios xr, cisco ios, cisco ios xe, and 4 more.

Description

Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCuo17183, CSCvd73487.

CVSS Metrics

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector: adjacent network
Complexity: low
Privileges: none
User Action: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
Weaknesses: CWE-119 · Memory Buffer Errors CWE-119 · Memory Buffer Errors

Metadata

Primary Vendor: CISCO
Published: 3/28/2018
Last Modified: 1/12/2026
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

cisco : ioscisco : ios_xecisco : ios_xrcisco : ioscisco : ios_xecisco : ioscisco : ios_xecisco : ioscisco : ios_xe

Remediation Guidance

Executive Summary

View on NIST NVD