CVEvulnerability

CVE-2018-0268

10.0 CRITICAL Published 2018-05-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-05-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
10.0 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-358

Description

A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and gain elevated privileges. This vulnerability is due to an insecure default configuration of the Kubernetes container management subsystem within DNA Center. An attacker who has the ability to access the Kubernetes service port could execute commands with elevated privileges within provisioned containers. A successful exploit could result in a complete compromise of affected containers. This vulnerability affects Cisco DNA Center Software Releases 1.1.3 and prior. Cisco Bug IDs: CSCvi47253.

Affected configurations

• cisco digital network architecture center (<= 1.1.3)

Related

Weakness · CWE (1)

  • CWE-358 Improperly Implemented Security Check for Standard weakness

References