CVE-2018-0330

🗓️ 20 Jun 2018 21:00:00Reported by ciscoType

A vulnerability in the NX-API management API in devices running Cisco NX-OS Software allows authenticated remote attackers to execute commands with elevated privileges

Reporter	Title	Published	Views	Family All 10
Tenable Nessus	Cisco NX-OS NXAPI Multiple Vulnerabilities.	25 Jun 201800:00	–	nessus
Tenable Nessus	Cisco NX-OS Software NX-API Privilege Escalation (CVE-2018-0330)	25 Jul 202300:00	–	nessus
Cisco	Cisco NX-OS Software NX-API Privilege Escalation Vulnerability	20 Jun 201816:00	–	cisco
CNVD	Multiple Cisco Products NX-OS Software NX-API management API Elevation of Privilege Vulnerability	21 Jun 201800:00	–	cnvd
Cvelist	CVE-2018-0330	20 Jun 201821:00	–	cvelist
EUVD	EUVD-2018-1153	7 Oct 202500:30	–	euvd
NVD	CVE-2018-0330	20 Jun 201821:29	–	nvd
OSV	CVE-2018-0330	20 Jun 201821:29	–	osv
Prion	Design/Logic Flaw	20 Jun 201821:29	–	prion
Vulnrichment	CVE-2018-0330	20 Jun 201821:00	–	vulnrichment

NVD

Node

cisco nx-osRange7.3–7.3(3)n1(1)

cisco nx-osMatch6.0

cisco nx-osMatch7.0

cisco nx-osMatch7.1

cisco nx-osMatch7.2

AND

cisco nexus_5000Match-

cisco nexus_5010Match-

cisco nexus_5020Match-

cisco nexus_5548pMatch-

cisco nexus_5548upMatch-

cisco nexus_5596tMatch-

cisco nexus_5596upMatch-

cisco nexus_56128pMatch-

cisco nexus_5624qMatch-

cisco nexus_5648qMatch-

cisco nexus_5672upMatch-

cisco nexus_5696qMatch-

Node

cisco nx-osRange7.3–7.3.2d1

cisco nx-osRange8.1–8.1.2

cisco nx-osMatch6.2

cisco nx-osMatch7.2

cisco nx-osMatch8.0

cisco nx-osMatch8.2

AND

cisco nexus_7000Match-

cisco nexus_7700Match-

Node

cisco nx-osRange<7.0(3)i3

cisco nx-osRange7.0(3)i4–7.0(3)i7(1)

AND

cisco nexus_92160yc-xMatch-

cisco nexus_92304qcMatch-

cisco nexus_9236cMatch-

cisco nexus_9272qMatch-

cisco nexus_93108tc-exMatch-

cisco nexus_93120txMatch-

cisco nexus_93128txMatch-

cisco nexus_93180yc-exMatch-

cisco nexus_9332pqMatch-

cisco nexus_9372pxMatch-

cisco nexus_9372txMatch-

cisco nexus_9396pxMatch-

cisco nexus_9396txMatch-

cisco nexus_9504Match-

cisco nexus_9508Match-

cisco nexus_9516Match-

cisco nexus_n9k-c9508-fm-rMatch-

cisco nexus_n9k-x9636c-rMatch-

cisco nexus_n9k-x9636q-rMatch-

Node

cisco nx-osRange<7.0(3)i3

cisco nx-osRange7.0(3)i4–7.0(3)i7(1)

AND

cisco nexus_172tq-xlMatch-

cisco nexus_3016Match-

cisco nexus_3048Match-

cisco nexus_3064-32tMatch-

cisco nexus_3064-tMatch-

cisco nexus_3064-xMatch-

cisco nexus_3100-vMatch-

cisco nexus_31128pqMatch-

cisco nexus_3132c-zMatch-

cisco nexus_3132qMatch-

cisco nexus_3132q-xMatch-

cisco nexus_3132q-xlMatch-

cisco nexus_3164qMatch-

cisco nexus_3172pqMatch-

cisco nexus_3172pq-xlMatch-

cisco nexus_3172tqMatch-

cisco nexus_3172tq-32tMatch-

cisco nexus_3232cMatch-

cisco nexus_3264c-eMatch-

cisco nexus_3264qMatch-

cisco nexus_34180ycMatch-

cisco nexus_3524-xMatch-

cisco nexus_3524-xlMatch-

cisco nexus_3548Match-

cisco nexus_3548-xMatch-

cisco nexus_3548-xlMatch-

cisco nexus_3636c-rMatch-

cisco nexus_c36180yc-rMatch-

Node

cisco nx-osRange6.0–7.3(3)n1(1)

AND

cisco nexus_6001pMatch-

cisco nexus_6001tMatch-

Node

cisco nx-osRange7.3–7.3.2d1

cisco nx-osRange8.1–8.1(1a)

cisco nx-osMatch5.2

cisco nx-osMatch6.2

cisco nx-osMatch8.2

AND

cisco mds_9000Match-

[
  {
    "product": "Cisco NX-OS unknown",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco NX-OS unknown"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-nxos-nxapi
securitytracker	www.securitytracker.com/id/1041169

21 Nov 2024 03:37Current

8.9High risk

Vulners AI Score8.9

CVSS 26.5

CVSS 38.8

EPSS0.00313

SSVC