Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-0337

A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on an affected device. The vulnerability exists because the affected software lacks proper input and validation checks for certain file systems. An attacker could exploit this vulnerability by issuing crafted commands in the CLI of an affected device. A successful exploit could allow the attacker to cause other users to execute unwanted, arbitrary commands on the affected device. Cisco Bug IDs: CSCvd06339, CSCvd15698, CSCvd36108, CSCvf52921, CSCvf52930, CSCvf52953, CSCvf52976.

Published

2018-06-21T11:29:00.837

Last Modified

2024-11-21T03:38:00.557

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-20
  • Type: Primary
    CWE-863
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco nx-os 7.0\(8\)n1\(1\) Yes
Operating System cisco nx-os 7.1\(4\)n1\(1\) Yes
Operating System cisco nx-os 7.3\(1\)n1\(0.6\) Yes
Operating System cisco nx-os 7.3\(2\)n1\(0.350\) Yes
Hardware cisco nexus_5000 - No
Hardware cisco nexus_5010 - No
Hardware cisco nexus_5020 - No
Hardware cisco nexus_5548p - No
Hardware cisco nexus_5548up - No
Hardware cisco nexus_5596t - No
Hardware cisco nexus_5596up - No
Hardware cisco nexus_56128p - No
Hardware cisco nexus_5624q - No
Hardware cisco nexus_5648q - No
Hardware cisco nexus_5672up - No
Hardware cisco nexus_5696q - No
Operating System cisco nx-os 7.3\(1\)dx\(0.119\) Yes
Operating System cisco nx-os 7.3\(3\)d1\(0.2\) Yes
Operating System cisco nx-os 8.0\(0.54\)s0 Yes
Operating System cisco nx-os 8.1\(0\)bd\(0.20\) Yes
Operating System cisco nx-os 8.1\(0.9\) Yes
Operating System cisco nx-os 8.2\(0.4\)s0 Yes
Operating System cisco nx-os 8.3\(0\)spg\(0.30\) Yes
Operating System cisco nx-os 8.8\(3.5\)s0 Yes
Hardware cisco nexus_7000 - No
Hardware cisco nexus_7700 - No
References