Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-0176

Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerabilities are due to the affected software improperly sanitizing command arguments to prevent access to internal data structures on a device. An attacker who has user EXEC mode (privilege level 1) access to an affected device could exploit these vulnerabilities on the device by executing CLI commands that contain crafted arguments. A successful exploit could allow the attacker to gain access to the underlying Linux shell of the affected device and execute arbitrary commands with root privileges on the device. Cisco Bug IDs: CSCtw85441, CSCus42252, CSCuv95370.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.8%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
Products affected by CVE-2018-0176
  • Cisco » Ios Xe » Version: 15.0(5.59)emd
    cpe:2.3:o:cisco:ios_xe:15.0(5.59)emd
  • Cisco » Ios Xe » Version: 16.1(0)
    cpe:2.3:o:cisco:ios_xe:16.1(0)
  • Cisco » Ios Xe » Version: 16.2(0)
    cpe:2.3:o:cisco:ios_xe:16.2(0)


Products
Pricing
Contact Us

Shodan ® - All rights reserved