CVE-2018-0125VulnerabilityPublished 03/25/2022Updated 10/24/2026

CVE-2018-0125: Cisco VPN Routers Remote Code Execution Vulnerability

Affects Cisco VPN RoutersSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/25/2022
KEV deadline: 04/15/2022
EPSS: 55.2% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2018-0125 (opens in a new tab)

Description

CVE-2018-0125 is a high-severity vulnerability in the web interface of Cisco VPN Routers that allows an unauthenticated remote attacker to execute arbitrary code with root privileges, potentially gaining full control of the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Summary

This vulnerability affects the web interface of Cisco VPN Routers, enabling an unauthenticated remote attacker to execute arbitrary code as root. Successful exploitation grants the attacker full control over the affected device. The vulnerability is identified as CVE-2018-0125 and is associated with CWE-20 (Improper Input Validation). It has been observed in active exploitation campaigns. However, no explicit patch or remediation details are provided in the input data.

Impact

An unauthenticated remote attacker can execute arbitrary code with root privileges on affected Cisco VPN Routers, leading to complete compromise of the device. This can result in loss of confidentiality, integrity, and availability of the router and potentially the network it protects. The vulnerability has been exploited in the wild, indicating active threat and real-world impact.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official fixes are confirmed, restrict access to the web interface of Cisco VPN Routers to trusted networks and monitor for suspicious activity related to this vulnerability.

Weaknesses

CWE-20Improper Input Validation (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:57:04 UTC

Weaknesses

References

Related threats