CVE-2018-0427
published 2018-08-15CVE-2018-0427: A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a…
PriorityP263high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
6.14%
92.6th percentile
A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to incorrect input validation of user-supplied data. An attacker could exploit this vulnerability by sending a malicious packet. A successful exploit could allow the attacker to execute arbitrary commands with root privileges. Cisco Bug IDs: CSCvi42263.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | application_policy_infrastructure_controller_enterprise_module | — | — |
| cisco | digital_network_architecture_center | — | — |
| cisco_systems_inc | digital_network_architecture_center | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Target the CronJob scheduler API of Cisco DNA Center for command injection attempts via malicious input in user-supplied data fields ↗
- →Successful exploitation results in arbitrary command execution with root privileges — monitor for unexpected root-level process spawning from the Cisco DNA Center CronJob API service ↗
- ·Exploitation requires authentication — monitor for authenticated sessions making unusual or malformed requests to the CronJob scheduler API endpoint ↗
- ·No workarounds are available for this vulnerability; patching is the only mitigation ↗
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
vendor_cisco6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Digital Network Architecture Center Command Injection Vulnerability
vendor_cisco·2018-08-15·CVSS 6.5
CVE-2018-0427 [MEDIUM] CWE-78 Cisco Digital Network Architecture Center Command Injection Vulnerability
Cisco Digital Network Architecture Center Command Injection Vulnerability
A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a command injection attack.
The vulnerability is due to incorrect input validation of user-supplied data. An attacker could exploit this vulnerability by sending a malicious packet. A successful exploit could allow the attacker to execute arbitrary commands with root privileges.
There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180815-dna-injection
Cisco
Cisco Digital Network Architecture Center Command Injection Vulnerability
vendor_cisco·CVSS 3.0
CVE-2018-0427 Cisco Digital Network Architecture Center Command Injection Vulnerability
CVE-2018-0427: Cisco Digital Network Architecture Center Command Injection Vulnerability
A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to incorrect input validation of user-supplied data. An attacker could exploit this vulnerability by sending a malicious packet. A successful exploit could allow the attacker to execute arbitrary commands with root privileges. There are no
CVSS: 3.0
CWE: CWE-78, CWE-78
Bug IDs: CSCvi42263
GHSA
GHSA-c4xx-c8c8-x26x: A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perfo
ghsa_unreviewed·2022-05-13
CVE-2018-0427 [HIGH] CWE-78 GHSA-c4xx-c8c8-x26x: A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perfo
A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to incorrect input validation of user-supplied data. An attacker could exploit this vulnerability by sending a malicious packet. A successful exploit could allow the attacker to execute arbitrary commands with root privileges. Cisco Bug IDs: CSCvi42263.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-08-15
Published