Privilege Escalation Vulnerability in Cisco WAAS Disk Check Tool
CVE-2018-0352
6.7MEDIUM
Key Information:
- Vendor
Cisco
- Vendor
- CVE Published:
- 7 June 2018
What is CVE-2018-0352?
A security vulnerability exists in the Disk Check Tool (disk-check.sh) of Cisco's Wide Area Application Services (WAAS) Software. It allows an authenticated, local attacker with super user privileges to replace legitimate script files with malicious code, potentially leading to root-level access and complete control of the device. The vulnerability arises from insufficient validation of executed script files, making it critical for users to safeguard against unauthorized access to mitigate exploitation risks.
Affected Version(s)
Cisco Wide Area Application Services unknown Cisco Wide Area Application Services unknown