CVE-2018-0395— Cisco FXOS and NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-0395
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco FXOS and NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition when the device unexpectedly reloads. The vulnerability is due to improper input validation of certain type, length, value (TLV) fields of the LLDP frame header. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface on the targeted device. A successful exploit could allow the attacker to cause the switch to reload unexpectedly.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
输入验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco FXOS Software和NX-OS Software 输入验证漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Firepower 4100 Series Next-Generation Firewalls等都是美国思科（Cisco）公司的产品。Cisco Firepower 4100 Series Next-Generation Firewalls是一款4100系列的防火墙设备。Nexus 1000V Series Switches是一款1000V系列的交换机设备。FXOS Software是一套运行在思科安全设备中的防火墙软件。NX-OS Software是运行在思科交换机设备中的一套数据中心级操作
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco NX-OS Software | unspecified ~ 6.2(1) | - | |
| Cisco | Firepower 4100 Series Next-Generation Firewalls | unspecified ~ <2.3.1.58 | - |
II. Public POCs for CVE-2018-0395
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-0395
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181017-fxnx-os-dosvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2018-0395
Same Patch Batch · Cisco · 2018-10-17 · 15 CVEs total
| CVE-2018-0388 | Cisco Wireless LAN Controller Software Cross-Site Scripting Vulnerability | |
| CVE-2018-0416 | Cisco Wireless LAN Controller Software Information Disclosure Vulnerability | |
| CVE-2018-0456 | Cisco NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vu | |
| CVE-2018-15395 | Cisco Wireless LAN Controller Software Privilege Escalation Vulnerability | |
| CVE-2018-15402 | Cisco Enterprise NFV Infrastructure Software Cross-Site Request Forgery Vulnerability | |
| CVE-2018-0378 | Cisco NX-OS Software for Nexus 5500, 5600, and 6000 Series Switches Precision Time Protoco | |
| CVE-2018-0417 | Cisco Wireless LAN Controller Software GUI Privilege Escalation Vulnerability | |
| CVE-2018-0381 | Cisco Aironet 1560, 1800, 2800, and 3800 Series Access Points Denial of Service Vulnerabil | |
| CVE-2018-0420 | Cisco Wireless LAN Controller Software Directory Traversal Vulnerability | |
| CVE-2018-0441 | Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability | |
| CVE-2018-0442 | Cisco Wireless LAN Controller Software Control and Provisioning of Wireless Access Points | |
| CVE-2018-0443 | Cisco Wireless LAN Controller Software Control and Provisioning of Wireless Access Points | |
| CVE-2018-15435 | Cisco SocialMiner Cross-Site Scripting Vulnerability | |
| CVE-2018-15438 | Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco NX-OS Software
- CVE-2026-20010
Cisco Nexus 3000 and 9000 Series Switches Link Layer Discove - CVE-2026-20051
Cisco Nexus 3600-R and 9500-R Series Switching Platforms Lay - CVE-2025-20241
Cisco Nexus 3000 and 9000 Series Switches IS-IS Protocol <TB - CVE-2025-20262
Cisco Nexus 3000 and 9000 Series Switches Protocol Independe - CVE-2025-20290
Cisco NXOS Software Sensitive Log Information Disclosure Vul
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-20
V. Comments for CVE-2018-0395
No comments yet