CVE-2018-15374

CVE-2018-15374 is a medium-severity vulnerability in the Image Verification feature of Cisco IOS XE Software, allowing an authenticated, local attacker to install malicious software images or files. This flaw stems from improper digital signature verification for uploaded images, enabling an attacker to bypass security checks. With a CVSS score of 6.7, the vulnerability requires high privileges and local access, but successful exploitation could lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.