Lucene search

CiscoCVE-2018-0088

HistoryJan 18, 2018 - 6:29 a.m.

CVE-2018-0088

2018-01-1806:29:00

CWE-732

CWE-399

cisco

web.nvd.nist.gov

"cisco

industrial ethernet

4010 series switches

vulnerability

device stability

diagnostic test

cli commands

cisco ios software

arbitrary code execution

denial of service

dos

privilege escalation

memory write vulnerability

exploit

cisco bug ids

cscvf71150"

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

Percentile

5.1%

JSON

A vulnerability in one of the diagnostic test CLI commands on Cisco Industrial Ethernet 4010 Series Switches running Cisco IOS Software could allow an authenticated, local attacker to impact the stability of the device. This could result in arbitrary code execution or a denial of service (DoS) condition. The attacker has to have valid user credentials at privilege level 15. The vulnerability is due to a diagnostic test CLI command that allows the attacker to write to the device memory. An attacker could exploit this vulnerability by authenticating to the targeted device and issuing a specific diagnostic test command at the CLI. An exploit could allow the attacker to overwrite system memory locations, which could have a negative impact on the stability of the device. Cisco Bug IDs: CSCvf71150.

Affected configurations

Nvd

Node

ciscoindustrial_ethernet_4010_series_firmware

AND

ciscoie-4010-16s12pMatch-

ciscoie-4010-4s24pMatch-

VendorProductVersionCPE
ciscoindustrial_ethernet_4010_series_firmware*cpe:2.3:o:cisco:industrial_ethernet_4010_series_firmware:*:*:*:*:*:*:*:*
ciscoie-4010-16s12p-cpe:2.3:h:cisco:ie-4010-16s12p:-:*:*:*:*:*:*:*
ciscoie-4010-4s24p-cpe:2.3:h:cisco:ie-4010-4s24p:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	industrial_ethernet_4010_series_firmware	*	cpe:2.3:o:cisco:industrial_ethernet_4010_series_firmware::::::::
cisco	ie-4010-16s12p	-	cpe:2.3:h:cisco:ie-4010-16s12p:-:::::::*
cisco	ie-4010-4s24p	-	cpe:2.3:h:cisco:ie-4010-4s24p:-:::::::*

CNA Affected

[
  {
    "product": "Cisco IOS",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco IOS"
      }
    ]
  }
]

References

www.securitytracker.com/id/1040240

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-iess

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

7.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2018-0088