Critical severity9.8NVD Advisory· Published Oct 5, 2018· Updated Jun 17, 2026

CVE-2018-15386

Description

A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an unauthenticated, remote attacker to bypass authentication and have direct unauthorized access to critical management functions. The vulnerability is due to an insecure default configuration of the affected system. An attacker could exploit this vulnerability by directly connecting to the exposed services. An exploit could allow the attacker to retrieve and modify critical system files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Digital Network Architecture Center4 versions
cpe:2.3:a:cisco:digital_network_architecture_center:1.1.1:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:cisco:digital_network_architecture_center:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:digital_network_architecture_center:1.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:digital_network_architecture_center:1.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:digital_network_architecture_center:1.1:-:*:*:*:*:*:*
Cisco Systems, Inc./Digital Network Architecture Center (DNA Center)llm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: n/a

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105504nvdThird Party AdvisoryVDB Entry
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-dna-unauth-accessnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000