Cisco NX-OS Software Role-Based Access Arbitrary Command Execution (CVE-2018-0337)

high Tenable OT Security Plugin ID 501288

Synopsis

The remote OT asset is affected by a vulnerability.

Description

A vulnerability in the role-based access-checking mechanisms of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on an affected device. The vulnerability exists because the affected software lacks proper input and validation checks for certain file systems. An attacker could exploit this vulnerability by issuing crafted commands in the CLI of an affected device. A successful exploit could allow the attacker to cause other users to execute unwanted, arbitrary commands on the affected device. Cisco Bug IDs: CSCvd06339, CSCvd15698, CSCvd36108, CSCvf52921, CSCvf52930, CSCvf52953, CSCvf52976.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

Solution

Refer to the vendor advisory.

Plugin Details

Severity: High

ID: 501288

Version: 1.1

Type: remote

Family: Tenable.ot

Published: 7/25/2023

Updated: 7/26/2023

Supported Sensors: Tenable OT Security

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.2

Temporal Score: 5.3

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2018-0337

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:cisco:nx-os:7.0%288%29n1%281%29, cpe:/o:cisco:nx-os:7.1%284%29n1%281%29, cpe:/o:cisco:nx-os:7.3%281%29dx%280.119%29, cpe:/o:cisco:nx-os:7.3%281%29n1%280.6%29, cpe:/o:cisco:nx-os:7.3%282%29n1%280.350%29, cpe:/o:cisco:nx-os:7.3%283%29d1%280.2%29, cpe:/o:cisco:nx-os:8.0%280.54%29s0, cpe:/o:cisco:nx-os:8.1%280%29bd%280.20%29, cpe:/o:cisco:nx-os:8.1%280.9%29, cpe:/o:cisco:nx-os:8.2%280.4%29s0, cpe:/o:cisco:nx-os:8.3%280%29spg%280.30%29, cpe:/o:cisco:nx-os:8.8%283.5%29s0

Required KB Items: Tenable.ot/Cisco

Exploit Ease: No known exploits are available

Patch Publication Date: 6/21/2018

Vulnerability Publication Date: 6/21/2018

Reference Information

CVE: CVE-2018-0337

CWE: 863

Detections

Analytics