CVE-2018-0293 describes a critical vulnerability in Cisco NX-OS Software's role-based access control (RBAC), affecting numerous Nexus and MDS 9000 Series switches. An authenticated, non-administrative user could exploit incorrect privilege assignments to execute restricted CLI commands, potentially modifying device configurations or boot images. With a CVSS score of 8.8 (High), this vulnerability has a network attack vector and low attack complexity, allowing for high impact on confidentiality, integrity, and availability. There is currently no public exploit code available (Metasploit, Nuclei, ExploitDB), nor is it listed on the KEV catalog, indicating no active exploitation. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.0, < 7.3\(3\)n1\(1\)CPE matchmatch criteria | cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* | ||
7.3\(2\)n1\(0.395\)CPE matchmatch criteria | cpe:2.3:o:cisco:nx-os:7.3\(2\)n1\(0.395\):*:*:*:*:*:*:* | ||
8.1\(0.112\)s0CPE matchmatch criteria | cpe:2.3:o:cisco:nx-os:8.1\(0.112\)s0:*:*:*:*:*:*:* | ||
>= 7.0\(3\)i4, < 7.0\(3\)i7\(1\)CPE matchmatch criteria | cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* | ||
>= 6.0, < 7.0\(3\)i7\(2\)CPE matchmatch criteria | cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.