CVE-2018-0271

A vulnerability in the API gateway of the Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and access critical services. The vulnerability is due to a failure to normalize URLs prior to servicing requests. An attacker could exploit this vulnerability by submitting a crafted URL designed to exploit the issue. A successful exploit could allow the attacker to gain unauthenticated access to critical services, resulting in elevated privileges in DNA Center. This vulnerability affects Cisco DNA Center Software Releases prior to 1.1.2. Cisco Bug IDs: CSCvi09394.

• CWE-287
• CWE-287

• http://www.securityfocus.com/bid/104191Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-dna2Vendor Advisory
• http://www.securityfocus.com/bid/104191Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-dna2Vendor Advisory

Published

May 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0265Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-0266A vulnerability in the web framework of Cisco Unified Commun…4.3
• CVE-2018-0267A vulnerability in the web framework of Cisco Unified Commun…6.5
• CVE-2018-0268A vulnerability in the container management subsystem of Cis…
• CVE-2018-0269A vulnerability in the web framework of the Cisco Digital Ne…4.3
• CVE-2018-0270A vulnerability in the web-based management interface of Cis…
• CVE-2018-0272A vulnerability in the Secure Sockets Layer (SSL) Engine of …
• CVE-2018-0273A vulnerability in the IPsec Manager of Cisco StarOS for Cis…
• CVE-2018-0274A vulnerability in the CLI parser of Cisco Network Services …8.8
• CVE-2018-0275A vulnerability in the support tunnel feature of Cisco Ident…
• CVE-2018-0276A vulnerability in Cisco WebEx Connect IM could allow an una…
• CVE-2018-0277A vulnerability in the Extensible Authentication Protocol-Tr…