CVE-2018-0432
A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting application configuration. An attacker could exploit this vulnerability by sending a crafted command to the error reporting feature. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device.
Published:Oct 5, 2018
Last Modified:Nov 26, 2024
EPS:Oct 5, 2018
EPSS Score:0.01736
CVSS Score:8.8
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Vedge 100
Cisco
Vedge 100
Vendor
Cisco
Product
Vedge 1000
Cisco
Vedge 1000
Vendor
Cisco
Product
Vedge 1000 Firmware
Cisco
Vedge 1000 Firmware
Vendor
Cisco
Product
Vedge 100 Firmware
Cisco
Vedge 100 Firmware
Vendor
Cisco
Product
Vedge 2000
Cisco
Vedge 2000
Vendor
Cisco
Product
Vedge 2000 Firmware
Cisco
Vedge 2000 Firmware
Vendor
Cisco
Product
Vedge 5000
Cisco
Vedge 5000
Vendor
Cisco
Product
Vedge 5000 Firmware
Cisco
Vedge 5000 Firmware
Vendor
Cisco
Product
Vmanage Network Management System
Cisco
Vmanage Network Management System
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
