CVE-2018-1111

CVE-2018-1111 is a critical command injection vulnerability affecting DHCP clients in Red Hat Enterprise Linux 6 and 7, and Fedora 28. A malicious DHCP server or an attacker on the local network can exploit this flaw to execute arbitrary commands with root privileges on vulnerable systems using NetworkManager. The vulnerability has a CVSS score of 7.5 (HIGH) due to its network-adjacent attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, public exploit modules exist for Metasploit and ExploitDB, indicating readily available exploit code. The high EPSS score, FAUCET Risk Score, and media coverage suggest significant community attention and a high likelihood of exploitation.