CVE-2018-0376

CVE-2018-0376 affects Cisco Policy Suite prior to 18.2.0, in which the Policy Builder interface lacked authentication, allowing unauthenticated remote access to modify or create repositories. The vulnerability is documented with high/severe impact (CVSS v3.0: 9.8, CRITICAL) and was acknowledged b...

CVE-2021-40119

CVE-2021-40119 affects Cisco Policy Suite. The root cause is reuse of static SSH keys across installations, enabling an unauthenticated attacker to log in as root via SSH to vulnerable devices. Cisco issued advisories and software updates; starting with Policy Suite releases 21.2.0 and later, dev...

CVE-2018-0377

Cisco Policy Suite CVE-2018-0377 concerns an unauthenticated access vulnerability in the OSGi interface prior to release 18.1.0. Root cause: lack of authentication on the OSGi interface, enabling remote connections that could read or modify files accessible to the OSGi process. Impact per sources...

CVE-2018-0375

CVE-2018-0375 affects Cisco Policy Suite Cluster Manager prior to 18.2.0. Root cause: undocumented, static credentials allow an unauthenticated, remote attacker to log in as root and execute arbitrary commands. Impact: full root access over the affected system via network; high confidentiality, i...