CVE-2018-0125 — Cisco VPN Routers Remote Code Execution Vulnerability

provenance: imported · CVE: CVE-2018-0125

CVE-2018-0125: Cisco VPN Routers Remote Code Execution Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Cisco
Product	VPN Routers
Date added	2022-03-25
Due date	2022-04-15
Ransomware campaign use	Unknown

Description

A vulnerability in the web interface of the Cisco VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as root and gain full control of an affected system.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-0125

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-0125
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog