CVE-2018-0463

CVE-2018-0463 is a high-severity vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator (NSO). It allows an unauthenticated, remote attacker to gain unauthorized access to configuration data due to incomplete validation when SUDI authentication is used. The attack requires an attacker-controlled Cisco device with SUDI support and connectivity to the NSO system, leveraging information about registered devices to send crafted authentication packets. A successful exploit could lead to unauthorized access to configuration data for devices managed by the NSO system. There is no public exploit code available (Metasploit, Nuclei, ExploitDB), and there is no evidence of active exploitation or significant community discussion.