CVE-2018-0115

CVE-2018-0115 is a command injection vulnerability in the CLI of Cisco StarOS, affecting Cisco ASR 5000, 5500, and 5700 Series routers. An authenticated, local attacker with administrator credentials can exploit insufficient input validation to inject malicious commands, leading to arbitrary command execution with root privileges. This vulnerability has a CVSS score of 6.7 (Medium), indicating a local attack vector with low complexity but high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.