Lucene search

[email protected]CVE-2018-0306

HistoryJun 21, 2018 - 11:29 a.m.

CVE-2018-0306

2018-06-2111:29:00

CWE-78

CWE-20

[email protected]

web.nvd.nist.gov

cisco

nx-os

software

cli

parser

vulnerability

authenticated

local attacker

command-injection

exploit

mds 9000

nexus 1000v

nexus 1100

nexus 2000

nexus 3000

nexus 3500

nexus 3600

nexus 5500

nexus 5600

nexus 6000

nexus 7000

nexus 7700

nexus 9000

cisco bug ids

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.2%

JSON

A vulnerability in the CLI parser of Cisco NX-OS Software could allow an authenticated, local attacker to perform a command-injection attack on an affected device. The vulnerability is due to insufficient input validation of command arguments. An attacker could exploit this vulnerability by injecting malicious command arguments into a vulnerable CLI command. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the affected device. Note: This vulnerability requires that any feature license is uploaded to the device. The vulnerability does not require that the license be used. This vulnerability affects MDS 9000 Series Multilayer Switches, Nexus 1000V Series Switches, Nexus 1100 Series Cloud Services Platforms, Nexus 2000 Series Fabric Extenders, Nexus 3000 Series Switches, Nexus 3500 Platform Switches, Nexus 3600 Platform Switches, Nexus 5500 Platform Switches, Nexus 5600 Platform Switches, Nexus 6000 Series Switches, Nexus 7000 Series Switches, Nexus 7700 Series Switches, Nexus 9000 Series Switches in standalone NX-OS mode, Nexus 9500 R-Series Line Cards and Fabric Modules. Cisco Bug IDs: CSCve51693, CSCve91634, CSCve91659, CSCve91663.

Affected configurations

NVD

Node

cisconx-osRange<7.3\(3\)n1\(1\)

AND

cisconexus_5000Match-

cisconexus_5010Match-

cisconexus_5020Match-

cisconexus_5548pMatch-

cisconexus_5548upMatch-

cisconexus_5596tMatch-

cisconexus_5596upMatch-

cisconexus_56128pMatch-

cisconexus_5624qMatch-

cisconexus_5648qMatch-

cisconexus_5672upMatch-

cisconexus_5696qMatch-

Node

cisconx-osMatch8.1\(0.2\)s0

AND

cisconexus_7000Match-

cisconexus_7700Match-

Node

cisconx-osMatch8.1\(0\)bd\(0.20\)

cisconx-osMatch8.1\(0.59\)s0

cisconx-osMatch8.1\(1\)

AND

cisconexus_92160yc-xMatch-

cisconexus_92304qcMatch-

cisconexus_9236cMatch-

cisconexus_9272qMatch-

cisconexus_93108tc-exMatch-

cisconexus_93120txMatch-

cisconexus_93128txMatch-

cisconexus_93180yc-exMatch-

cisconexus_9332pqMatch-

cisconexus_9372pxMatch-

cisconexus_9372txMatch-

cisconexus_9396pxMatch-

cisconexus_9396txMatch-

cisconexus_9504Match-

cisconexus_9508Match-

cisconexus_9516Match-

cisconexus_n9k-c9508-fm-rMatch-

cisconexus_n9k-x9636c-rMatch-

cisconexus_n9k-x9636q-rMatch-

Node

cisconx-osMatch6.0\(2\)a8\(3\)

AND

cisconexus_172tq-xlMatch-

cisconexus_3016Match-

cisconexus_3048Match-

cisconexus_3064-32tMatch-

cisconexus_3064-tMatch-

cisconexus_3064-xMatch-

cisconexus_3100-vMatch-

cisconexus_31128pqMatch-

cisconexus_3132c-zMatch-

cisconexus_3132qMatch-

cisconexus_3132q-xMatch-

cisconexus_3132q-xlMatch-

cisconexus_3164qMatch-

cisconexus_3172pqMatch-

cisconexus_3172pq-xlMatch-

cisconexus_3172tqMatch-

cisconexus_3172tq-32tMatch-

cisconexus_3232cMatch-

cisconexus_3264c-eMatch-

cisconexus_3264qMatch-

cisconexus_34180ycMatch-

cisconexus_3524-xMatch-

cisconexus_3524-xlMatch-

cisconexus_3548Match-

cisconexus_3548-xMatch-

cisconexus_3548-xlMatch-

cisconexus_3636c-rMatch-

cisconexus_c36180yc-rMatch-

Node

cisconx-osRange<7.3\(3\)n1\(1\)

AND

cisconexus_2148tMatch-

cisconexus_2224tp_geMatch-

cisconexus_2232pp_10geMatch-

cisconexus_2232tm-e_10geMatch-

cisconexus_2232tm_10geMatch-

cisconexus_2248pq_10geMatch-

cisconexus_2248tp-eMatch-

cisconexus_2248tp_geMatch-

Node

cisconx-osRange<7.3\(3\)n1\(1\)

AND

cisconexus_6001pMatch-

cisconexus_6001tMatch-

Node

cisconx-osRange<5.2\(1\)sv3\(3.15\)

AND

cisconexus_1000vMatch-

cisconexus_1110-sMatch-

cisconexus_1110-xMatch-

Node

cisconx-osRange<8.1\(1a\)

AND

ciscomds_9132tMatch-

ciscomds_9148Match-

ciscomds_9148sMatch-

ciscomds_9148tMatch-

ciscomds_9222iMatch-

ciscomds_9250iMatch-

ciscomds_9396sMatch-

ciscomds_9396tMatch-

ciscomds_9506Match-

ciscomds_9509Match-

ciscomds_9513Match-

ciscomds_9706Match-

ciscomds_9710Match-

ciscomds_9718Match-

CPENameOperatorVersion
cisco:nx-oscisco nx-oslt7.3\(3\)n1\(1\)

CPE	Name	Operator	Version
cisco:nx-os	cisco nx-os	lt	7.3\(3\)n1\(1\)

CNA Affected

[
  {
    "product": "Cisco NX-OS unknown",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco NX-OS unknown"
      }
    ]
  }
]

References

www.securitytracker.com/id/1041169

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-nx-os-cli-execution

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2018-0306

nessus2 prion1 cvelist1 nvd1 cisco1