CVE-2018-0275

A vulnerability in the support tunnel feature of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to access the device's shell. The vulnerability is due to improper configuration of the support tunnel feature. An attacker could exploit this vulnerability by tricking the device into unlocking the support user account and accessing the tunnel password and device serial number. A successful exploit could allow the attacker to run any system command with root access. This affects Cisco Identity Services Engine (ISE) software versions prior to 2.2.0.470. Cisco Bug IDs: CSCvf54409.

• CWE-16

• http://www.securitytracker.com/id/1040717Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-iseVendor Advisory
• http://www.securitytracker.com/id/1040717Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-iseVendor Advisory

Published

Apr 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0269A vulnerability in the web framework of the Cisco Digital Ne…4.3
• CVE-2018-0270A vulnerability in the web-based management interface of Cis…
• CVE-2018-0271A vulnerability in the API gateway of the Cisco Digital Netw…
• CVE-2018-0272A vulnerability in the Secure Sockets Layer (SSL) Engine of …
• CVE-2018-0273A vulnerability in the IPsec Manager of Cisco StarOS for Cis…
• CVE-2018-0274A vulnerability in the CLI parser of Cisco Network Services …8.8
• CVE-2018-0276A vulnerability in Cisco WebEx Connect IM could allow an una…
• CVE-2018-0277A vulnerability in the Extensible Authentication Protocol-Tr…
• CVE-2018-0278A vulnerability in the management console of Cisco Firepower…6.5
• CVE-2018-0279A vulnerability in the Secure Copy Protocol (SCP) server of …8.8
• CVE-2018-0280A vulnerability in the Real-Time Transport Protocol (RTP) bi…
• CVE-2018-0281A vulnerability in the detection engine of Cisco Firepower S…