CVE-2018-0182

CVE-2018-0182 describes multiple command injection vulnerabilities in the CLI parser of Cisco IOS XE Software. These flaws, stemming from insufficient sanitization of command arguments, allow an authenticated, local attacker to inject arbitrary commands. A successful exploit could grant the attacker root privileges on the underlying Linux shell of affected devices. The vulnerability has a CVSS v3.0 score of 7.8 (High), indicating a significant risk due to its low attack complexity and high impact on confidentiality, integrity, and availability. An attacker requires local access and authentication to exploit this weakness. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or attention.