CVE-2018-0222
published 2018-05-17CVE-2018-0222: A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to log in to an affected system by using an…
PriorityP275critical10CVSS 3.0
AVNACLPRNUINSCCHIHAH
EPSS
3.79%
88.6th percentile
A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to log in to an affected system by using an administrative account that has default, static user credentials. The vulnerability is due to the presence of undocumented, static user credentials for the default administrative account for the affected software. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and execute arbitrary commands with root privileges. This vulnerability affects all releases of Cisco DNA Center Software prior to Release 1.1.3. Cisco Bug IDs: CSCvh98929.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | digital_network_architecture_center | < 1.1.3 | 1.1.3 |
| cisco | digital_network_architecture_center_static_credentials | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Detect use of undocumented, static default administrative credentials on Cisco DNA Center — any successful login by the default administrative account from an unexpected or external source should be treated as suspicious. ↗
- →Alert on unauthenticated remote logins to Cisco DNA Center administrative interfaces, especially those resulting in root-level command execution. ↗
- →All releases of Cisco DNA Center Software prior to Release 1.1.3 are affected; flag any such unpatched systems in the environment as high-priority targets. ↗
- ·No workarounds are available for this vulnerability; the only remediation is upgrading to Cisco DNA Center Software Release 1.1.3 or later. ↗
- ·The static credentials are undocumented, meaning the exact username/password pair is not publicly disclosed in the advisory; detection must rely on behavioral indicators (unexpected admin logins, root command execution) rather than credential-string matching. ↗
CVSS provenance
nvdv3.010.0CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_cisco10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rr45-pqf5-hmrg: A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to log in to an affected system by
ghsa_unreviewed·2022-05-13
CVE-2018-0222 [CRITICAL] CWE-798 GHSA-rr45-pqf5-hmrg: A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to log in to an affected system by
A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to log in to an affected system by using an administrative account that has default, static user credentials. The vulnerability is due to the presence of undocumented, static user credentials for the default administrative account for the affected software. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and execute arbitrary commands with root privileges. This vulnerability affects all releases of Cisco DNA Center Software prior to Release 1.1.3. Cisco Bug IDs: CSCvh98929.
Cisco
Cisco Digital Network Architecture Center Static Credentials Vulnerability
vendor_cisco·2018-05-16·CVSS 10.0
CVE-2018-0222 [CRITICAL] CWE-798 Cisco Digital Network Architecture Center Static Credentials Vulnerability
Cisco Digital Network Architecture Center Static Credentials Vulnerability
A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to log in to an affected system by using an administrative account that has default, static user credentials.
The vulnerability is due to the presence of undocumented, static user credentials for the default administrative account for the affected software. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and execute arbitrary commands with root privileges.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerab
Cisco
Cisco Digital Network Architecture Center Static Credentials Vulnerability
vendor_cisco·CVSS 3.0
CVE-2018-0222 Cisco Digital Network Architecture Center Static Credentials Vulnerability
CVE-2018-0222: Cisco Digital Network Architecture Center Static Credentials Vulnerability
A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to log in to an affected system by using an administrative account that has default, static user credentials. The vulnerability is due to the presence of undocumented, static user credentials for the default administrative account for the affected software. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to log in to the affected system and execute arbitrary commands with root privileges. Cisco has released software updates that address this vulnerability. There are no
CVSS: 3.0
CWE: CWE-798,
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-05-17
Published