What is CVE-2018-0329?

CVE-2018-0329 is a medium-severity vulnerability in Cisco Wide Area Application Services, classified under Use of Hard-coded Credentials. CVSS score: 5.3/10. Published 2018-06-07.

How severe is CVE-2018-0329?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Cisco Wide Area Application Services

CVE-2018-0329

A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Cisco Wide Area Application Services (WAAS) Software could allow an unauthenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to a hard-coded, read-only community string in the configuration file for the SNMP daemon. An attacker could exploit this vulnerability by using the static community string in SNMP version 2c queries to an affected device. A successful exploit could allow the attacker to read any data that is accessible via SNMP on the affected device. Note: The static credentials are defined in an internal configuration file and are not visible in the current operation configuration ('running-config') or the startup configuration ('startup-config'). Cisco Bug IDs: CSCvi40137.

Published 2018-06-07 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

EPSS exploit prediction

EPSS: 0.024 (83.1th percentile), scored 2026-09-30.

Low probability of exploitation in the next 30 days, but still tracked. 83rd percentile — 83.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.024 · newest: 0.024 · change: 0.000

Affected products

Cisco Wide Area Application Services — versions 6.4\(1\), 6.2(3), 6.2\(3\)
Cisco Wide Area Application Services Unknown — versions Cisco Wide Area Application Services unknown

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

www.securitytracker.com/id/1041078 (VDB Entry, Third Party Advisory, vdb-entry)
www.securityfocus.com/bid/104590 (VDB Entry, Third Party Advisory, vdb-entry)
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606… (Vendor Advisory)

Frequently asked questions

What is CVE-2018-0329?: CVE-2018-0329 is a medium-severity vulnerability in Cisco Wide Area Application Services, classified under Use of Hard-coded Credentials. CVSS score: 5.3/10. Published 2018-06-07.
How severe is CVE-2018-0329?: Medium severity. CVSS v3 base score is 5.3 out of 10.