CVE-2018-10932

MEDIUM

lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into th...

Affects 1 product across 1 vendor.

CVSS 3.04.3
EPSS1.0%
Percentile63th
PatchUnknown
CVSS Vector — Plain English Exploitable from adjacent network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, no confidentiality impact, no availability impact.
CWE Weakness Definitions
CWE-117: CWE-117
CWE-119: Improper Restriction of Operations within Memory Buffer

Parent class for buffer-related vulnerabilities where operations exceed buffer boundaries.

Related Attack Patterns (CAPEC)
CAPEC-8 Buffer Overflow in an API Call
via CWE-119
CAPEC-9 Buffer Overflow in Local Command-Line Utilities
via CWE-119
CAPEC-10 Buffer Overflow via Environment Variables
via CWE-119
CAPEC-14 Client-side Injection-induced Buffer Overflow
via CWE-119
CAPEC-24 Filter Failure through Buffer Overflow
via CWE-119
Show all 15

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2018. A medium severity vulnerability affects Intel systems (CVE-2018-10932). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2018-GLOBAL-123658-M • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2018-10932?
This vulnerability was disclosed in 2018. A medium severity vulnerability affects Intel systems (CVE-2018-10932). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2018-10932?
CVE-2018-10932 has CVSS 4.3 (Medium). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. EPSS: 1.0%.
Is CVE-2018-10932 actively exploited?
No confirmed active exploitation of CVE-2018-10932 as of 2026-05-30.
How do I remediate CVE-2018-10932?
Priority: MONITOR.
What systems are affected by CVE-2018-10932?
CVE-2018-10932 affects Intel Lldptool.
Vulnerability Details
CVE IDCVE-2018-10932
BSIDBS-2018-GLOBAL-123658-M BreachSpider Global ID
CVSS VectorCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Published2018-08-21
Last Modified2024-11-21
ICS Relevance0%
Weakness (CWE)
CWE-117Improper Restriction of Operations within Memory Buffer
SourceNVD
Official Description

lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: lldptool version 1.0.1 and older can print a raw, unsanitized attacker controlled buffer when mngAddr information is displayed. This may allow an attacker to inject shell control characters into the buffer and impact the behavior of the terminal. CVSS vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Intel Lldptool ≤ 1.0.1
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2977 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashc87471044564171e33ca7784891a5d69991cdc6411d0c514cd5a9ec1424eebf77a50c17fd65a75ab1a47379162e12aa46352ae2da95d00d3df5ffd3e510c92a5
Related CVEs affecting Intel
CVE-2000-0384 10.0 NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wiz... CVE-2007-1307 10.0 Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 1... CVE-2024-22476 10.0 Improper input validation in some Intel(R) Neural Compressor software before ... CVE-2021-44228 10.0 Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2... CVE-2022-25899 9.8 Authentication bypass for the Open AMT Cloud Toolkit software maintained by I...
View all Intel CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →