Read the docs
TI-2018-00354 Aliases CVE-2018-0395GHSA-3wmx-fc2q-p8g5

Cisco FXOS and NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability

Priority MEDIUM 41CWE-20Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA.

Summary

A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition when the device unexpectedly reloads. The vulnerability is due to improper input validation of certain type, length, value (TLV) fields of the LLDP frame header. An attacker could exploit this vulnerability by sending a crafted LLDP packet to an interface on the targeted device. A successful exploit could allow the attacker to cause the switch to reload unexpectedly.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00788 56th percentileScored 2026-11-07
Fix Fixed Cisco NX-OS Software (Cisco): 6.2(1)Firepower 4100 Series Next-Generation Firewalls (Cisco): <2.3.1.58

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco NX-OS Softwarebefore 6.2(1)6.2(1)Patch availableCNA
CiscoFirepower 4100 Series Next-Generation Firewallsbefore <2.3.1.58<2.3.1.58Patch availableCNA
  • Cisco NX-OS Software VendorCisco Affected before 6.2(1) Fixed in 6.2(1) Patch available CNA
  • Firepower 4100 Series Next-Generation Firewalls VendorCisco Affected before <2.3.1.58 Fixed in <2.3.1.58 Patch available CNA

CPE configurations NVD · 16

CPEVersionsRoleVendor
cpe:2.3:o:cisco:nx-os:6.0\(4\):*:*:*:*:*:*:*6.0(4)VulnerableCisco
cpe:2.3:o:cisco:nx-os:6.1\(3\)s2:*:*:*:*:*:*:*6.1(3)s2VulnerableCisco
cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_7000_4-slot:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_7700_10-slot:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_7700_18-slot:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_7700_2-slot:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:h:cisco:nexus_7700_6-slot:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
  • cpe:2.3:o:cisco:nx-os:6.0\(4\):*:*:*:*:*:*:* Versions 6.0(4) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:6.1\(3\)s2:*:*:*:*:*:*:* Versions 6.1(3)s2 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_7000_4-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_7700_10-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_7700_18-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_7700_2-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:h:cisco:nexus_7700_6-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
Show 6 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:cisco:firepower_extensible_operating_system:r231:*:*:*:*:*:*:*r231VulnerableCisco
cpe:2.3:o:cisco:nx-os:r231:*:*:*:*:*:*:*r231VulnerableCisco
cpe:2.3:h:cisco:firepower_9300:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:o:cisco:nx-os:12.3\(1e\):*:*:*:*:*:*:*12.3(1e)VulnerableCisco
cpe:2.3:o:cisco:nx-os:3.2\(3d\)c:*:*:*:*:*:*:*3.2(3d)cVulnerableCisco
cpe:2.3:h:cisco:ucs:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
  • cpe:2.3:o:cisco:firepower_extensible_operating_system:r231:*:*:*:*:*:*:* Versions r231 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:r231:*:*:*:*:*:*:* Versions r231 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:firepower_9300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:o:cisco:nx-os:12.3\(1e\):*:*:*:*:*:*:* Versions 12.3(1e) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:3.2\(3d\)c:*:*:*:*:*:*:* Versions 3.2(3d)c Vulnerable ·Cisco
  • cpe:2.3:h:cisco:ucs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco

Remediation

  • Fix · CNA Cisco NX-OS Software (Cisco) Fixed in 6.2(1)
  • Fix · CNA Firepower 4100 Series Next-Generation Firewalls (Cisco) Fixed in <2.3.1.58

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-0395
  2. 2026-10-03 Alias added: GHSA-3wmx-fc2q-p8g5

References

Advisory 1

  • TI-2018-00269 Resource management flaw in Cisco FXOS and NX-OS unknown CVSS 3.0CRITICAL 9.8
  • TI-2015-05417 An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco… CVSS 3.0CRITICAL 9.8
  • TI-2019-01480 Cisco FXOS and NX-OS Software Simple Network Management Protocol Denial of Service Vulnerability CVSS 3.1HIGH 8.6
  • TI-2019-01225 Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities CVSS 3.0HIGH 8.6
  • TI-2019-01224 Cisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service Vulnerabilities CVSS 3.0HIGH 8.6
  • TI-2020-03063 Cisco FXOS and NX-OS Software Cisco Fabric Services Denial of Service Vulnerability CVSS 3.1HIGH 8.6
See all 55 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences