CVE-2018-0211 is a denial-of-service vulnerability affecting Cisco Identity Services Engine (ISE) due to insufficient input validation in specific CLI commands. An authenticated, local attacker with administrative privileges can exploit this by issuing a crafted command, potentially requiring a manual reboot to recover the device. With a CVSS score of 4.4 (Medium), the attack requires high privileges and local access, limiting its broader impact. There is no known exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.1\(0.474\)CPE matchmatch criteria | cpe:2.3:a:cisco:identity_services_engine:2.1\(0.474\):*:*:*:*:*:*:* | ||
2.2\(1.145\)CPE matchmatch criteria | cpe:2.3:a:cisco:identity_services_engine:2.2\(1.145\):*:*:*:*:*:*:* | ||
2.4\(0.247\)CPE matchmatch criteria | cpe:2.3:a:cisco:identity_services_engine:2.4\(0.247\):*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.