CVE-2018-0433

🗓️ 05 Oct 2018 14:00:00Reported by ciscoType

Vulnerability in Cisco SD-WAN CLI allows authenticated local attacker to execute arbitrary commands

Reporter	Title	Published	Views	Family All 8
Cisco	Cisco SD-WAN Solution Command Injection Vulnerability	5 Sep 201816:00	–	cisco
CNVD	Cisco SD-WAN Solution Command Injection Vulnerability	10 Sep 201800:00	–	cnvd
Cvelist	CVE-2018-0433 Cisco SD-WAN Solution Command Injection Vulnerability	5 Oct 201814:00	–	cvelist
EUVD	EUVD-2018-1256	7 Oct 202500:30	–	euvd
NVD	CVE-2018-0433	5 Oct 201814:29	–	nvd
OSV	CVE-2018-0433	5 Oct 201814:29	–	osv
Prion	Input validation	5 Oct 201814:29	–	prion
Vulnrichment	CVE-2018-0433 Cisco SD-WAN Solution Command Injection Vulnerability	5 Oct 201814:00	–	vulnrichment

NVD

Node

cisco vedge_100_firmwareRange<18.3.0

AND

cisco vedge_100Match-

Node

cisco vedge_1000_firmwareRange<18.3.0

AND

cisco vedge_1000Match-

Node

cisco vedge_2000_firmwareRange<18.3.0

AND

cisco vedge_2000Match-

Node

cisco vedge_5000_firmwareRange<18.3.0

AND

cisco vedge_5000Match-

Node

cisco vbond_orchestratorMatch-

cisco vedge_cloud_router_platformMatch-

cisco vmanage_network_management_systemMatch-

cisco vsmart_controllerMatch-

[
  {
    "product": "Cisco SD-WAN Solution",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-sd-wan-injection
securityfocus	www.securityfocus.com/bid/105295

21 Nov 2024 03:38Current

7.7High risk

Vulners AI Score7.7

CVSS 27.2

CVSS 3.17.8

EPSS0.00098

SSVC