Remote Code Execution Vulnerability in Cisco Cloud Services Platform 2100
CVE-2018-0394

8.8HIGH

Key Information:

Vendor
Cisco
Status
Cisco Cloud Services Platform 2100 Unknown
Vendor
CVE Published:
18 July 2018

Summary

A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 allows authenticated remote attackers to gain restricted shell access. This issue arises from inadequate input validation of parameters sent to a specific user interface function. An attacker can exploit the flaw by injecting malicious code into a function parameter, potentially compromising the system's security. For more details, refer to Cisco's advisory linked in references.

Affected Version(s)

Cisco Cloud Services Platform 2100 unknown Cisco Cloud Services Platform 2100 unknown

References

http://www.securityfocus.com/bid/104881
vdb-entryx_refsource_BID
https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.