Summary
There is a buffer overflow vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software which could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code.
- Vendor
- Cisco
- Product
- IOS, XR, and XE Software
- Added to KEV
- Mar 3, 2022
- Remediation due
- Mar 17, 2022 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-119
- EPSS
- 3.4% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References