Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Apr 15, 2022

CVE-2018-0125

High
EPSS 39.6%CISA KEV
Cisco/VPN Routers

Description

A vulnerability in the web interface of the Cisco VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as root and gain full control of an affected system.

EPSS — Exploit Probability

39.6%

Higher than 97.2% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2018-0125

Risk Assessment

ELEVATED
In CISA KEV

Details

Severity
High
EPSS
39.6%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Mar 25, 2022

Added to KEV

Mar 25, 2022

Remediation Due

Apr 15, 2022

Affected Product

Cisco

VPN Routers

View all Cisco CVEs