CVE-2018-0454

A vulnerability in the web-based management interface of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to perform command injection. The vulnerability is due to insufficient input validation of command input. An attacker could exploit this vulnerability by sending customized commands to the web-based management interface.

• CWE-77
• CWE-77

• http://www.securitytracker.com/id/1041683Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-csp2100-injectionVendor Advisory
• http://www.securitytracker.com/id/1041683Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-csp2100-injectionVendor Advisory

Published

Oct 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0448A vulnerability in the identity management service of Cisco …9.8
• CVE-2018-0449A vulnerability in the Cisco Jabber Client Framework (JCF) s…4.2
• CVE-2018-0450A vulnerability in the web-based management interface of Cis…
• CVE-2018-0451A vulnerability in the web-based management interface of Cis…
• CVE-2018-0452A vulnerability in the web-based management interface of Cis…
• CVE-2018-0453A vulnerability in the Sourcefire tunnel control channel pro…8.2
• CVE-2018-0455A vulnerability in the Server Message Block Version 2 (SMBv2…
• CVE-2018-0456A vulnerability in the Simple Network Management Protocol (S…7.7
• CVE-2018-0457A vulnerability in the Cisco Webex Player for Webex Recordin…
• CVE-2018-0458A vulnerability in the web-based management interface of Cis…
• CVE-2018-0459A vulnerability in the web-based management interface of Cis…
• CVE-2018-0460A vulnerability in the REST API of Cisco Enterprise NFV Infr…