CVE-2018-0427CWE-77

A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a…

published August 15, 2018

CVSS
—
EPSS
6%
Percentile
93.3
In the wild
Unconfirmed
What it is

A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to incorrect input validation of user-supplied data. An attacker could exploit this vulnerability by sending a malicious packet. A successful exploit could allow the attacker to execute arbitrary commands with root privileges. Cisco Bug IDs: CSCvi42263.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06063 · 93.3th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2018-08-15T20:00Z
EPSS history
Timeline
  • 15 AUG 20:00Z
    A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a…
    cvelistv5