CVE-2018-0304

🗓️ 20 Jun 2018 21:00:00Reported by ciscoType

A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, remote attacker to read sensitive memory content, create a denial of service (DoS) condition, or execute arbitrary code as root. The vulnerability exists because the affected software insufficiently validates Cisco Fabric Services packet headers

Reporter	Title	Published	Views	Family All 10
Tenable Nessus	Cisco NX-OS Cisco Fabric Services Multiple Vulnerabilities.	25 Jun 201800:00	–	nessus
Tenable Nessus	Cisco FXOS Software Cisco Fabric Services Arbitrary Code Execution (cisco-sa-20180620-fxnxos-ace)	14 Jul 202000:00	–	nessus
Tenable Nessus	Cisco NX-OS Software Cisco Fabric Services Arbitrary Code Execution (cisco-sa-20180620-fxnxos-ace)	14 Jul 202000:00	–	nessus
Cisco	Cisco FXOS and NX-OS Software Cisco Fabric Services Arbitrary Code Execution Vulnerability	20 Jun 201816:00	–	cisco
CNVD	Cisco FXOS and NX-OS CFS Arbitrary Code Execution Vulnerability (CNVD-2018-11965)	21 Jun 201800:00	–	cnvd
Cvelist	CVE-2018-0304	20 Jun 201821:00	–	cvelist
EUVD	EUVD-2018-1127	7 Oct 202500:30	–	euvd
NVD	CVE-2018-0304	20 Jun 201821:29	–	nvd
Prion	Buffer overflow	20 Jun 201821:29	–	prion
Vulnrichment	CVE-2018-0304	20 Jun 201821:00	–	vulnrichment

NVD

Node

cisco nexus_7000_firmwareMatch7.3(2)d1(0.49)

cisco nexus_7000_firmwareMatch8.0(1)

cisco nexus_7000_firmwareMatch8.1(0.112)s0

AND

cisco nexus_7000Match-

Node

cisco nexus_5000_firmwareMatch7.0(0)hsk(0.357)

cisco nexus_5000_firmwareMatch7.3(0)d1(0.98)

cisco nexus_5000_firmwareMatch8.1(0.2)s0

AND

cisco nexus_5000Match-

Node

cisco firepower_9000_firmwareMatchr211

cisco firepower_9000_firmwareMatchr231

AND

cisco firepower_9000Match-

Node

cisco nexus_9000_firmwareMatch8.1(0)bd(0.20)

cisco nexus_9000_firmwareMatch8.1(1)s4

AND

cisco nexus_9000Match-

Node

cisco unified_computing_system_firmwareMatch3.1(3a)a

cisco unified_computing_system_firmwareMatch7.0(0)hsk(0.357)

AND

cisco unified_computing_systemMatch-

[
  {
    "product": "Cisco FXOS and NX-OS unknown",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco FXOS and NX-OS unknown"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-fxnxos-ace
securityfocus	www.securityfocus.com/bid/104513
securitytracker	www.securitytracker.com/id/1041169

21 Nov 2024 03:37Current

9.8High risk

Vulners AI Score9.8

CVSS 39.8

CVSS 210

EPSS0.05758

SSVC