CVE-2018-0271 Auth bypass in Cisco Digital Network Architecture Center

Critical 9.8 Published 17 May 2018 Updated 29 Nov 2024

Unauthenticated remote attackers can bypass authentication in Cisco DNA Center API gateway via crafted URLs, gaining elevated privileges.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-0271?

CVE-2018-0271 is a critical authentication bypass vulnerability in Cisco Digital Network Architecture Center, published on 17 May 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the API gateway of the Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and access critical services. The vulnerability is due to a failure to normalize URLs prior to servicing requests. An attacker could exploit this vulnerability by submitting a crafted URL designed to exploit the issue. A successful exploit could allow the attacker to gain unauthenticated access to critical services, resulting in elevated privileges in DNA Center. This vulnerability affects Cisco DNA Center Software Releases prior to 1.1.2. Cisco Bug IDs: CSCvi09394.

Weakness: CWE-287

Which versions are affected by CVE-2018-0271?

It affects 1 product.

Products include Cisco Digital Network Architecture Center.

How do I fix CVE-2018-0271?

No fix has been published for CVE-2018-0271 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2018-0271 being exploited?

There is no known exploitation of CVE-2018-0271 in the wild and no public exploit code.

Sources

Also known as GHSA-cmgw-hg4c-4pp2.