CVE-2018-0484

CVE-2018-0484 describes a medium-severity access control bypass vulnerability in Cisco IOS and IOS XE Software's SSH server. It allows SSH connections sourced from a Virtual Routing and Forwarding (VRF) instance to bypass intended access-class restrictions, even without the vrf-also keyword. While an attacker could establish a connection, valid credentials are still required to gain device access, limiting the direct impact to unauthorized connection establishment (CVSS 6.5). There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.