CVE-2018-0268

CRITICAL

A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and gain elevated privileges. This vulnerability is due to an insecure default configuration of the Kubernetes container management subsystem within DNA Center. An attacker who has the ability to access the Kubernetes service port could execute commands with elevated privileges within provisioned containers. A successful exploit could result in a complete compromise of affected containers. This vulnerability affects Cisco DNA Center Software Releases 1.1.3 and prior. Cisco Bug IDs: CSCvi47253.

Published: May 17, 2018 Modified: Jun 17, 2026

CWE-358 CWE-358

CVSS Metrics

CVSSv3

Attack Vector: NETWORK Attack Complexity: LOW Privileges Required: NONE User Interaction: NONE Scope: CHANGED Confidentiality Impact: HIGH Integrity Impact: HIGH Availability Impact: HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Products (1)

Vendor	Product	Version
cisco	digital_network_architecture_center	*

GitHub Security Advisory GHSA-jxrp-hx95-x2ch

A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA)...

References (4)

http://www.securityfocus.com/bid/104192 Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-dna Vendor Advisory
http://www.securityfocus.com/bid/104192 Third Party Advisory, VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-dna Vendor Advisory

Risk Scores

CVSS Score 10.0 / 10

EPSS Score 5.20%

Top 8% most likely to be exploited

Threat Score 41.6 / 100

Data Sources

NVD EPSS GitHub