Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-0258

A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary files to any directory of a vulnerable device (aka Path Traversal) and execute those files. This vulnerability affects the following products: Cisco Prime Data Center Network Manager (DCNM) Version 10.0 and later, and Cisco Prime Infrastructure (PI) All versions. Cisco Bug IDs: CSCvf32411, CSCvf81727.

Published

2018-05-02T22:29:00.793

Last Modified

2024-11-21T03:37:49.960

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-22
  • Type: Primary
    CWE-22
    CWE-434
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco prime_data_center_network_manager 10.0\(1\) Yes
Application cisco prime_data_center_network_manager 10.2\(1\) Yes
Application cisco prime_infrastructure 3.3\(0.0\) Yes
References