CVE-2018-0268: Critical severity cisco dna center vulnerability
A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and gain elevated privileges. This vulnerability is due to an insecure default configuration of the Kubernetes container management subsystem within DNA Center. An attacker who has the ability to access the Kubernetes service port could execute commands with elevated privileges within provisioned containers. A successful exploit could result in a complete compromise of affected containers. This vulnerability affects Cisco DNA Center Software Releases 1.1.3 and prior. Cisco Bug IDs: CSCvi47253.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-0268?
CVE-2018-0268 is a vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center that allows an unauthenticated, remote attacker to bypass authentication and gain elevated privileges.
What is the severity of CVE-2018-0268?
CVE-2018-0268 has a severity level of critical.
How does CVE-2018-0268 affect Cisco Digital Network Architecture (DNA) Center?
CVE-2018-0268 affects Cisco Digital Network Architecture (DNA) Center versions up to and including 1.1.3.
How can an attacker exploit CVE-2018-0268?
An attacker can exploit CVE-2018-0268 by exploiting the insecure default configuration of the Kubernetes container management system in Cisco Digital Network Architecture (DNA) Center.
Where can I find more information about CVE-2018-0268?
You can find more information about CVE-2018-0268 on the following websites: - [SecurityFocus](http://www.securityfocus.com/bid/104192) - [Cisco Security Advisory](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-dna)