Cisco Digital Network Architecture Center vulnerabilities

11 CVEs affecting Cisco Digital Network Architecture Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3391, published 2020-07-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-5390, published 2018-08-06. High severity, CVSS 7.5. EPSS: 71.1% chance of exploitation in the next 30 days. Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.
CVE-2018-0268, published 2018-05-17. Critical severity, CVSS 10.0. EPSS: 5% chance of exploitation in the next 30 days. A vulnerability in the container management subsystem of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and gain elevated…
CVE-2018-0222, published 2018-05-17. Critical severity, CVSS 10.0. EPSS: 3.6% chance of exploitation in the next 30 days. A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to log in to an affected system by using an administrative account that has default,…
CVE-2018-15386, published 2018-10-05. Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days. A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and have direct unauthorized access to critical management…
CVE-2019-1675, published 2019-02-07. High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days. A vulnerability in the default configuration of the Cisco Aironet Active Sensor could allow an unauthenticated, remote attacker to restart the sensor. The vulnerability is due to a default local…
CVE-2018-0271, published 2018-05-17. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. A vulnerability in the API gateway of the Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and access critical services. The…
CVE-2018-0448, published 2018-10-05. Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days. A vulnerability in the identity management service of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and take complete…
CVE-2020-3391, published 2020-07-02. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The vulnerability is due to insecure…
CVE-2018-0269, published 2018-04-19. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in the web framework of the Cisco Digital Network Architecture Center (DNA Center) could allow an unauthenticated, remote attacker to communicate with the Kong API server without…
CVE-2020-3281, published 2020-06-03. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the audit logging component of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to view sensitive information in clear text. The…

Latest

CVE-2019-1848, published 2019-06-20. Critical severity, CVSS 9.3. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, adjacent attacker to bypass authentication and access critical internal services. The vulnerability…