Buffer Overflow Vulnerability in Cisco FXOS and UCS Fabric Interconnects
CVE-2018-0302

7.8HIGH

Key Information:

Vendor
Cisco
Status
Cisco Fxos Software And Ucs Fabric Interconnect Unknown
Vendor
CVE Published:
21 June 2018

Summary

A vulnerability in the CLI parser of Cisco FXOS and UCS Fabric Interconnect Software allows local authenticated attackers to cause a buffer overflow. This vulnerability arises from improper input validation within the CLI parser subsystem, permitting attackers to exceed the anticipated input length. If successfully exploited, this could lead to arbitrary code execution with root privileges on the affected devices, posing significant security risks.

Affected Version(s)

Cisco FXOS Software and UCS Fabric Interconnect unknown Cisco FXOS Software and UCS Fabric Interconnect unknown

References

https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.