What is CVE-2018-0226?

CVE-2018-0226 is a high-severity vulnerability in Cisco Mobility_express_software, classified under CWE-255. CVSS score: 7.5/10. Published 2018-05-02.

How severe is CVE-2018-0226?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Cisco Mobility_express_software

CVE-2018-0226

A vulnerability in the assignment and management of default user accounts for Secure Shell (SSH) access to Cisco Aironet 1800, 2800, and 3800 Series Access Points that are running Cisco Mobility Express Software could allow an authenticate…

EPSS: 0.022 (80.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cisco Mobility_express_software — versions 8.3\(90.65\), 8.4\(1.65\)
N/a Cisco Aironet 1800, 2800, And 3800 Series Access Points — versions Cisco Aironet 1800, 2800, and 3800 Series Access Points

Weakness classification (CWE)

CWE-255

References

psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2018-0226?: CVE-2018-0226 is a high-severity vulnerability in Cisco Mobility_express_software, classified under CWE-255. CVSS score: 7.5/10. Published 2018-05-02.
How severe is CVE-2018-0226?: High severity. CVSS v3 base score is 7.5 out of 10.