CVE-2018-0167

An unauthenticated adjacent attacker could exploit a buffer overflow in Cisco IOS XR LLDP to execute arbitrary code or cause a DoS.

Cisco IOS, XR, and XE Software contained a buffer overflow in the LLDP subsystem allowing remote code execution without authentication. DIB organizations must ensure continuous patching of network infrastructure, as this vulnerability was actively exploited in the wild and represents a systemic failure in input validation across critical networking hardware.

Shame score — A foundational networking vendor shipped a critical RCE vulnerability in an unauthenticated subsystem that was actively exploited in the wild, demonstrating severe negligence in patching and input validation.