CVE-2018-0432

A vulnerability in the error reporting feature of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the error reporting application configuration. An attacker could exploit this vulnerability by sending a crafted command to the error reporting feature. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device.

Score
CVSS 3.0 8.8 High
Status
Modified - psirt@cisco.com
Published
2018-10-05
Last modified
2024-11-26
Weaknesses
CWE-264, CWE-78

Affected products

References

 
 
© AVABIS GmbH privacypolicy about