CVE-2018-0428

CVE-2018-0428 is a privilege escalation vulnerability in the account management subsystem of Cisco Web Security Appliance (WSA) that allows an authenticated, local attacker to gain root privileges. The vulnerability stems from improper access control implementation, enabling an attacker with valid administrator credentials to escape the CLI subshell and execute system-level commands. With a CVSS score of 6.7 (MEDIUM), a successful exploit grants high impact to confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this CVE.