Vulnslist

find the latest Cisco vulnerabilities

Cisco Digital Network Architecture Center Unauthorized Access Vulnerability

cisco-sa-20180516-dna · Critical · Published · Updated

A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and gain elevated privileges. This vulnerability is due to an insecure default configuration of the Kubernetes container management subsystem within DNA Center. An attacker who has the ability to access the Kubernetes service port could execute commands with elevated privileges within provisioned containers. A successful exploit could result in a complete compromise of affected containers. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-dna

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address this vulnerability.

CVEsCVE-2018-0268
Cisco Bug IDsCSCvi47253
CVSS ScoreBase 10.0
Base 10.0 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:X/RL:X/RC:X
Product Names From Source
Cisco Digital Network Architecture Center (DNA Center)

Related Products

Product CVE Evidence
Cisco RV Series Routers CVE-2018-0268 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2018-0268 Cisco OpenVuln
Cisco Digital Network Architecture Center (DNA Center) CVE-2018-0268 Cisco OpenVuln