Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2018-0271

Quick assessment

Affected

n/a Cisco Digital Network Architecture Center

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco Digital Network Architecture（DNA）Center是美国思科（Cisco）公司的一套数字网络体系结构解决方案。该方案能够扩展并保护网络内的设备、应用程序等。API gateway是其中的一个API（应用程序接口）网关。 Cisco DNA Center 1.1.2之前版本中的API gateway存在授权问题漏洞，该漏洞源于在执行请求之前程序没有标准化URLs。远程攻击者可通过提交特制的URL利用该漏洞绕过身份验证，访问重要的服务。

AI Predicted 9.8 Difficulty: Easy EPSS 2.55% · P85 Updated Feb 21, 2026

Possible ATT&CK Techniques 2 AI

T1021 · Remote Services T1557 · Adversary-in-the-Middle

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2018-0271

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

A vulnerability in the API gateway of the Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and access critical services. The vulnerability is due to a failure to normalize URLs prior to servicing requests. An attacker could exploit this vulnerability by submitting a crafted URL designed to exploit the issue. A successful exploit could allow the attacker to gain unauthenticated access to critical services, resulting in elevated privileges in DNA Center. This vulnerability affects Cisco DNA Center Software Releases prior to 1.1.2. Cisco Bug IDs: CSCvi09394.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

认证机制不恰当

Source: CVE Program / CVE List V5

Vulnerability Title

Cisco Digital Network Architecture Center API gateway 授权问题漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	Cisco Digital Network Architecture Center	Cisco Digital Network Architecture Center	-

II. Public POCs for CVE-2018-0271

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2018-0271

请登录查看更多情报信息。

Vendor Advisories for CVE-2018-0271 (2)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-dna2 x_refsource_CONFIRM
http://www.securityfocus.com/bid/104191 vdb-entry x_refsource_BID

https://www.cve.org/CVERecord?id=CVE-2018-0271

Same Patch Batch · n/a · 2018-05-17 · 41 CVEs total

CVE-2018-0280		Cisco Meeting Server 输入验证漏洞
CVE-2018-11230		jbig2enc 安全漏洞
CVE-2018-11224		Libav 安全漏洞
CVE-2018-11225		libming 安全漏洞
CVE-2018-11226		libming 安全漏洞
CVE-2018-0222		Cisco Digital Network Architecture Center 安全漏洞
CVE-2018-0268		Cisco Digital Network Architecture Center 安全漏洞
CVE-2018-0270		Cisco IoT Field Network Director 跨站请求伪造漏洞
CVE-2018-0277		Cisco Identity Services Engine 安全漏洞
CVE-2018-0279		Cisco Enterprise NFV Infrastructure Software Secure Copy Protocol服务器输入验证错误漏洞
CVE-2018-10027		ESTsoft ALZip 安全漏洞
CVE-2018-0289		Cisco Identity Services Engine logs组件跨站脚本漏洞
CVE-2018-0290		Cisco SocialMiner 资源管理错误漏洞
CVE-2018-0297		Cisco Firepower Threat Defense detection引擎安全漏洞
CVE-2018-0323		Cisco Enterprise NFV Infrastructure Software 路径遍历漏洞
CVE-2018-0324		Cisco Enterprise NFV Infrastructure Software CLI 命令注入漏洞
CVE-2018-0325		Cisco IP Phone 7800 Series和Cisco IP Phone 8800 Series 输入验证漏洞
CVE-2018-0326		Cisco TelePresence Server Software Web UI 安全漏洞
CVE-2018-0327		Cisco Identity Services Engine 跨站脚本漏洞
CVE-2018-0328		Cisco Unified Communications Manager和Cisco Unified Presence 输入验证漏洞

Showing top 20 of 41 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Cisco Digital Network Architecture Center

Same vendor: n/a

Same weakness: CWE-287