CVE-2018-0096 describes a privilege escalation vulnerability in Cisco Prime Infrastructure's role-based access control (RBAC) functionality. An authenticated, remote attacker could exploit this flaw to view and modify configurations of virtual domains they are not authorized to access. The vulnerability has a CVSS score of 5.9 (Medium), indicating a high impact on confidentiality and integrity, but requires high privileges and attack complexity. Despite its potential impact, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.2\(0.0\)CPE matchmatch criteria | cpe:2.3:a:cisco:prime_infrastructure:3.2\(0.0\):*:*:*:*:*:*:* | ||
3.3\(0.0\)CPE matchmatch criteria | cpe:2.3:a:cisco:prime_infrastructure:3.3\(0.0\):*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.2 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.