Lucene search

CiscoCVE-2018-0123

HistoryFeb 08, 2018 - 7:29 a.m.

CVE-2018-0123

2018-02-0807:29:00

CWE-22

cisco

web.nvd.nist.gov

cisco

ios

ios xe

vulnerability

path traversal

input validation

cisco bug ids

nvd

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

5.4

Confidence

High

EPSS

Percentile

5.1%

JSON

A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, local attacker to use certain diagnostic shell commands that can overwrite system files. These system files may be sensitive and should not be able to be overwritten by a user of the diagnostic shell. The vulnerability is due to lack of proper input validation for certain diagnostic shell commands. An attacker could exploit this vulnerability by authenticating to the device, entering the diagnostic shell, and providing crafted user input to commands at the local diagnostic shell CLI. Successful exploitation could allow the attacker to overwrite system files that should be restricted. Cisco Bug IDs: CSCvg41950.

Affected configurations

Nvd

Node

ciscoiosMatch16.7\(1\)

ciscoios_xeMatch-

VendorProductVersionCPE
ciscoios16.7(1)cpe:2.3:o:cisco:ios:16.7\(1\):*:*:*:*:*:*:*
ciscoios_xe-cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios	16.7(1)	cpe:2.3:o:cisco:ios:16.7\(1\):::::::*
cisco	ios_xe	-	cpe:2.3:o:cisco:ios_xe:-:::::::*

CNA Affected

[
  {
    "product": "Cisco IOS and IOS XE",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco IOS and IOS XE"
      }
    ]
  }
]

References

www.securityfocus.com/bid/102967

www.securitytracker.com/id/1040346

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-ios

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

5.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2018-0123