- Description
- Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Cisco Bug IDs: CSCvd73664.
- Source
- psirt@cisco.com
- NVD status
- Analyzed
CVSS 3.1
- Type
- Primary
- Base score
- 8
- Impact score
- 5.9
- Exploitability score
- 2.1
- Vector string
- CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 7.9
- Impact score
- 10
- Exploitability score
- 5.5
- Vector string
- AV:A/AC:M/Au:N/C:C/I:C/A:C
Data from CISA
- Vulnerability name
- Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
- Exploit added on
- Mar 3, 2022
- Exploit action due
- Mar 17, 2022
- Required action
- Apply updates per vendor instructions.
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios:15.4\\(3\\)m4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87BA352E-4C21-4428-A64B-E0C8B8287791"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xe:15.4\\(3\\)m4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6337E9DA-2C56-46BF-A00A-04B993ABD017"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xr:15.4\\(3\\)m4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5EA58F1A-A931-4416-86F8-D1055F1F05AA"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7690EC4-F375-4D0A-8EED-26E01ECFDE55",
"versionEndIncluding": "15.2\\(4a\\)ea5"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C90778E3-4A55-498F-9CD6-80F8029AA722",
"versionEndIncluding": "15.2\\(4a\\)ea5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:allen-bradley_stratix_8300_industrial_managed_ethernet_switch:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E96AE552-ABC5-4101-ACF6-B7F20FFB4043"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEE6CC29-29A9-4465-B0EA-1ECC435EBC55",
"versionEndIncluding": "15.2\\(6\\)e0a"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBBC562A-BC2C-4F64-B5D4-47C33BBEE3C7",
"versionEndIncluding": "15.2\\(6\\)e0a"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:allen-bradley_armorstratix_5700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D8849345-E011-4160-A91C-DB760497AF9A"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:allen-bradley_stratix_5400:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DE92939D-3D1E-445C-8888-F3EB4E35A034"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:allen-bradley_stratix_5410:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0B148D62-D1B2-4E40-9DDD-A8702DFAD2E4"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:allen-bradley_stratix_5700:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8994DEA7-C4EC-47B9-8AEA-832AF9D1F8E4"
},
{
"criteria": "cpe:2.3:h:rockwellautomation:allen-bradley_stratix_8000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F9A02987-E6F4-41D2-92C5-016A22AC7D0A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65FB1D01-2A6F-496E-AD56-BBE03DEB9493",
"versionEndIncluding": "15.6.3m1"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E51621B6-010D-4D9F-9A9D-C354D8BB8135",
"versionEndIncluding": "15.6.3m1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:rockwellautomation:allen-bradley_stratix_5900_services_router:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4519D430-ABFF-4683-AB18-1D87A6B1A217"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]