CVE-2018-0123 describes a Path Traversal vulnerability in the diagnostic shell of Cisco IOS and IOS XE Software. An authenticated, local attacker can exploit this by providing crafted input to diagnostic shell commands, allowing them to overwrite sensitive system files. With a CVSS score of 5.5 (Medium), this vulnerability requires local authentication and low attack complexity, but successful exploitation can lead to high integrity impact by overwriting critical files. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
16.7\(1\)CPE matchmatch criteria | cpe:2.3:o:cisco:ios:16.7\(1\):*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.