CVE-2018-15439 in the critical feed json
Cisco Small Business Switches Privileged Access Vulnerability
published 2018-11-08 8 y ago modified 2026-06-17 4 mo ago also EUVD-2018-7317
- cvss
- 9.8
- version 3.0, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 49.7%
- EPSS 49.7% chance of exploitation in 30 days, percentile 98%
- public exploits
- 1
- Metasploit
Summary
A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected software enables a privileged user account without notifying administrators of the system. An attacker could exploit this vulnerability by using this account to log in to an affected device and execute commands with full admin rights. Cisco has not released software updates that address this vulnerability. This advisory will be updated with fixed software information once fixed software becomes available. There is a workaround to address this vulnerability.
Timeline
- Published
- First public exploit (Metasploit exploit/linux/local/cpi_runrshell_priv_esc)
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 23 mo ago
Exploit prediction
49.74% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/linux/local/cpi_runrshell_priv_esc Cisco Prime Infrastructure Runrshell Privilege Escalation metasploit exploit, excellent rank, 2018-12-08
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Affected products
- Cisco Cisco Small Business 300 Series Managed Switches
Classification
- Weakness
-
- CWE-798 Use of Hard-coded Credentials
References
-
tools.cisco.com
/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-sbsw-privacc
vendor-advisory
-
securityfocus.com
/bid/105873
vdb-entry, third-party-advisory
Sources
- CVE List CVE-2018-15439
- NVD CVE-2018-15439
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.