Lucene search
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.OT_500216.NASLHistoryNov 08, 2019 - 12:00 a.m.
Cisco Ios Use of Externally-Controlled Format String
2019-11-0800:00:00
This script is Copyright (C) 2019-2021 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
7
0.004 Low
EPSS
Percentile
73.7%
Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCvd73664.
File data ot_500216.nasl| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | ios | 15.4(3)m4.1 | cpe:2.3:o:cisco:ios:15.4\(3\)m4.1:*:*:*:*:*:*:* |
| cisco | ios_xe | 15.4(3)m4.1 | cpe:2.3:o:cisco:ios_xe:15.4\(3\)m4.1:*:*:*:*:*:*:* |
| cisco | ios_xr | 15.4(3)m4.1 | cpe:2.3:o:cisco:ios_xr:15.4\(3\)m4.1:*:*:*:*:*:*:* |
| cisco | ios | 15.4(3)m4.1 | cpe:2.3:o:cisco:ios:15.4\(3\)m4.1:*:*:*:*:*:*:* |
| cisco | ios_xe | 15.4(3)m4.1 | cpe:2.3:o:cisco:ios_xe:15.4\(3\)m4.1:*:*:*:*:*:*:* |
| cisco | ios_xr | 15.4(3)m4.1 | cpe:2.3:o:cisco:ios_xr:15.4\(3\)m4.1:*:*:*:*:*:*:* |
| rockwellautomation | allen-bradley_armorstratix_5700 | - | cpe:2.3:h:rockwellautomation:allen-bradley_armorstratix_5700:-:*:*:*:*:*:*:* |
| rockwellautomation | allen-bradley_stratix_5400 | - | cpe:2.3:h:rockwellautomation:allen-bradley_stratix_5400:-:*:*:*:*:*:*:* |
| rockwellautomation | allen-bradley_stratix_5410 | - | cpe:2.3:h:rockwellautomation:allen-bradley_stratix_5410:-:*:*:*:*:*:*:* |
| rockwellautomation | allen-bradley_stratix_5700 | - | cpe:2.3:h:rockwellautomation:allen-bradley_stratix_5700:-:*:*:*:*:*:*:* |
References
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0175
www.securityfocus.com/bid/103564
www.securitytracker.com/id/1040586
ics-cert.us-cert.gov/advisories/ICSA-18-107-03
ics-cert.us-cert.gov/advisories/ICSA-18-107-04
ics-cert.us-cert.gov/advisories/ICSA-18-107-05
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180328-lldp
Related
cve
cve
CVE-2018-0175
2018-03-28 22:29:01
cvelist
cvelist
CVE-2018-0175
2018-03-28 22:00:00
attackerkb
attackerkb
CVE-2018-0175
2018-03-28 00:00:00
nvd
nvd
CVE-2018-0175
2018-03-28 22:29:01
cisa_kev
cisa_kev
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
2022-03-03 00:00:00
prion
prion
Format string
2018-03-28 22:29:00
cisco
cisco
nessus
nessus
ics
ics
Rockwell Automation Stratix Services Router
2018-04-25 12:00:00
Rockwell Automation Stratix and ArmorStratix Switches
2018-04-25 12:00:00
Rockwell Automation Stratix Industrial Managed Ethernet Switch
2018-04-25 12:00:00