CVE-2018-0121

A vulnerability in the authentication functionality of the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrator privileges on an affected system. The vulnerability is due to improper security restrictions that are imposed by the web-based service portal of the affected software. An attacker could exploit this vulnerability by submitting an empty password value to an affected portal when prompted to enter an administrative password for the portal. A successful exploit could allow the attacker to bypass authentication and gain administrator privileges for the web-based service portal of the affected software. This vulnerability affects Cisco Elastic Services Controller Software Release 3.0.0. Cisco Bug IDs: CSCvg29809.

• CWE-287
• CWE-287

• http://www.securityfocus.com/bid/103113Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-escVendor Advisory
• http://www.securityfocus.com/bid/103113Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180221-escVendor Advisory

Published

Feb 22, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0115A vulnerability in the CLI of the Cisco StarOS operating sys…
• CVE-2018-0116A vulnerability in the RADIUS authentication module of Cisco…
• CVE-2018-0117A vulnerability in the ingress packet processing functionali…
• CVE-2018-0118A vulnerability in the web-based management interface of Cis…
• CVE-2018-0119A vulnerability in certain authentication controls in the ac…
• CVE-2018-0120A vulnerability in the web framework of Cisco Unified Commun…
• CVE-2018-0122A vulnerability in the CLI of the Cisco StarOS operating sys…4.4
• CVE-2018-0123A Path Traversal vulnerability in the diagnostic shell for C…
• CVE-2018-0124A vulnerability in Cisco Unified Communications Domain Manag…
• CVE-2018-0125A vulnerability in the web interface of the Cisco RV132W ADS…9.8
• CVE-2018-0127A vulnerability in the web interface of Cisco RV132W ADSL2+ …9.8
• CVE-2018-0128A vulnerability in the web-based management interface of Cis…