Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-0284

A vulnerability in the local status page functionality of the Cisco Meraki MR, MS, MX, Z1, and Z3 product lines could allow an authenticated, remote attacker to modify device configuration files. The vulnerability occurs when handling requests to the local status page. An exploit could allow the attacker to establish an interactive session to the device with elevated privileges. The attacker could then use the elevated privileges to further compromise the device or obtain additional configuration data from the device that is being exploited.

Published

2018-11-08T16:29:00.227

Last Modified

2024-11-21T03:37:53.637

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-264
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco meraki_mr_24_firmware < 24.13 Yes
Operating System cisco meraki_mr_25_firmware < 25.11 Yes
Hardware cisco meraki_mr - No
Operating System cisco meraki_ms_10_firmware < 10.20 Yes
Operating System cisco meraki_ms_9_firmware < 9.37 Yes
Hardware cisco meraki_ms - No
Operating System cisco meraki_mx_13_firmware < 13.32 Yes
Operating System cisco meraki_mx_14_firmware < 14.25 Yes
Operating System cisco meraki_mx_15_firmware < 15.7 Yes
Hardware cisco meraki_mx - No
Operating System cisco meraki_mx_13_firmware < 13.32 Yes
Operating System cisco meraki_mx_14_firmware < 14.25 Yes
Operating System cisco meraki_mx_15_firmware < 15.7 Yes
Hardware cisco meraki_z1 - No
Operating System cisco meraki_mx_13_firmware < 13.32 Yes
Operating System cisco meraki_mx_14_firmware < 14.25 Yes
Operating System cisco meraki_mx_15_firmware < 15.7 Yes
Hardware cisco meraki_z3 - No
References