CVE-2018-11750: Puppet Cisco IOS Module

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Previous releases of the Puppet cisco_ios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of cisco_ios, host key checking is enabled by default.

Affected products

• Puppet Cisco IOS Module: before 0.4.0 (fixed in 0.4.0)

Published 2018-10-02. Last modified 2026-06-17.