CVE-2018-0150 is a critical static credential vulnerability in Cisco IOS XE Software Release 16.x, affecting devices like the 4431 and 4451 Integrated Services Routers. An unauthenticated, remote attacker can exploit an undocumented user account with default credentials and privilege level 15. This allows for complete compromise of the device, as reflected by its CVSS score of 9.8 (Critical). While no public exploit code or active exploitation is confirmed, the vulnerability has garnered significant community discussion and media coverage, indicating high awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
16.5.1CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.