CVE-2018-0268

CVE-2018-0268 describes a critical authentication bypass vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center, affecting software releases 1.1.3 and prior. This flaw stems from an insecure default configuration of the Kubernetes service within DNA Center. An unauthenticated, remote attacker could exploit this by accessing the Kubernetes service port, allowing them to execute commands with elevated privileges and potentially achieve a complete compromise of affected containers. With a CVSS score of 10.0 (CRITICAL), this vulnerability has a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Its EPSS score of 0.12546 and FAUCET Risk Score of 96/100 indicate a significant threat. While there is no evidence of active exploitation (KEV: No) and no known public exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered substantial community attention with 12 mentions and two media articles, suggesting awareness and potential for future exploitation.