CVE-2018-0395

published 2018-10-17

CVE-2018-0395: A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated…

Priority P4 23 medium 5.3 CVSS 3.0

AV A AC H PR N UI N S U C N I N A H

A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition when the device unexpectedly reloads. The vulnerability is due to improper input validation of certain type, length, value (TLV) fields of the LLDP frame header. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface on the targeted device. A successful exploit could allow the attacker to cause the switch to reload unexpectedly.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_nx-os_software	>= unspecified < 6.2(1)	6.2(1)
cisco	firepower_4100_series_next-generation_firewalls	>= unspecified < <2.3.1.58	<2.3.1.58
cisco	firepower_extensible_operating_system	—	—
cisco	fxos_and_nx-os	—	—
cisco	nx-os	—	—
cisco	nx-os	—	—
cisco	nx-os	—	—
cisco	nx-os	—	—
cisco	nx-os	—	—

CVSS provenance

nvd v3.0 5.3 MEDIUM CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 2.9 LOW AV:A/AC:M/Au:N/C:N/I:N/A:P

vendor_cisco 8.8 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20