From cisco-sa-20180307-cpcp: "...an unauthenticated, local attacker ... could exploit this vulnerability by connecting to the affected system via Secure Shell"

This is a remote root hole.