CVE-2018-0427 - CVE House

Back to Database

Status published High CVE-2018-0427

A vulnerability in the CronJob scheduler API of Cisco Digital...

8.8 CVSS

Vulnerability Description

A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to incorrect input validation of user-supplied data. An attacker could exploit this vulnerability by sending a malicious packet. A successful exploit could allow the attacker to execute arbitrary commands with root privileges. Cisco Bug IDs: CSCvi42263.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-0427

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Cisco Systems, Inc.

View All →

Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc....

An exploitable code execution vulnerability exists in the XCF image...

An exploitable information vulnerability exists in the XCF image rendering...

An exploitable information disclosure vulnerability exists in the PCX image...

A vulnerability in the account management subsystem of Cisco Web...

Affected Vendor

Cisco Systems, Inc.

View all reports →

Affected Software

Digital Network Architecture (DNA) Center

Vulnerable Versions:

unspecified

Timeline

Official Publish: August 15th, 2018

Last Modified: November 26th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1105 Ingress Tool Transfer

Command and Control