CVE-2018-0095

CVE-2018-0095 is a privilege escalation vulnerability in the administrative shell of Cisco AsyncOS, affecting Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA). An authenticated local attacker, even with guest-level credentials, can exploit an incorrect networking configuration to gain root access. This vulnerability has a CVSS score of 7.8 (High) due to its low attack complexity and significant impact on confidentiality, integrity, and availability. While no public exploit code or Metasploit modules are available, the vulnerability has received some community discussion and media coverage, though it is not currently listed on the KEV catalog or considered actively exploited.