cnvd - cnvd-2018-03161

Name
['Cisco Email Security Appliance 9.7.1-066', 'Cisco Content SMA', 'Cisco Email Security Appliance 10.0.0-085', 'Cisco Content Security Management Appliance (SMA) 9.7.0-006']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "102729"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0095"
    }
  },
  "description": "\u601d\u79d1\u7535\u5b50\u90ae\u4ef6\u5b89\u5168\u8bbe\u5907(ESA)\u662f\u7535\u5b50\u90ae\u4ef6\u5b89\u5168\u7f51\u5173\u4ea7\u54c1\uff0c\u65e8\u5728\u68c0\u6d4b\u548c\u963b\u6b62\u5404\u79cd\u7535\u5b50\u90ae\u4ef6\u4f20\u64ad\u7684\u5a01\u80c1\uff0c\u6bd4\u5982\u6076\u610f\u8f6f\u4ef6\u3001\u5783\u573e\u90ae\u4ef6\u53ca\u7f51\u7edc\u9493\u9c7c\u653b\u51fb\u3002Cisco Content Security Management Appliance (SMA)\u53ef\u96c6\u4e2d\u5316\u591a\u4e2a\u601d\u79d1\u7535\u5b50\u90ae\u4ef6\u548c\u7f51\u7edc\u5b89\u5168\u8bbe\u5907\u7684\u7ba1\u7406\u548c\u62a5\u544a\u529f\u80fd\u3002\r\n\r\nCisco Email Security Appliance (ESA)\u548cContent Security Management Appliance (SMA)\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u3002\u672c\u5730\u8ba4\u8bc1\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u7ba1\u7406shell\u547d\u4ee4\u884c\u63a5\u53e3\u63d0\u4f9b\u7279\u5236\u547d\u4ee4\u800c\u5229\u7528\u7f51\u7edc\u914d\u7f6e\u7f3a\u9677\u5e76\u83b7\u5f97root\u6743\u9650\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-esasma",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-03161",
  "openTime": "2018-02-11",
  "patchDescription": "\u601d\u79d1\u7535\u5b50\u90ae\u4ef6\u5b89\u5168\u8bbe\u5907(ESA)\u662f\u7535\u5b50\u90ae\u4ef6\u5b89\u5168\u7f51\u5173\u4ea7\u54c1\uff0c\u65e8\u5728\u68c0\u6d4b\u548c\u963b\u6b62\u5404\u79cd\u7535\u5b50\u90ae\u4ef6\u4f20\u64ad\u7684\u5a01\u80c1\uff0c\u6bd4\u5982\u6076\u610f\u8f6f\u4ef6\u3001\u5783\u573e\u90ae\u4ef6\u53ca\u7f51\u7edc\u9493\u9c7c\u653b\u51fb\u3002Cisco Content Security Management Appliance (SMA)\u53ef\u96c6\u4e2d\u5316\u591a\u4e2a\u601d\u79d1\u7535\u5b50\u90ae\u4ef6\u548c\u7f51\u7edc\u5b89\u5168\u8bbe\u5907\u7684\u7ba1\u7406\u548c\u62a5\u544a\u529f\u80fd\u3002\r\n\r\nCisco Email Security Appliance (ESA)\u548cContent Security Management Appliance (SMA)\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u3002\u672c\u5730\u8ba4\u8bc1\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u7ba1\u7406shell\u547d\u4ee4\u884c\u63a5\u53e3\u63d0\u4f9b\u7279\u5236\u547d\u4ee4\u800c\u5229\u7528\u7f51\u7edc\u914d\u7f6e\u7f3a\u9677\u5e76\u83b7\u5f97root\u6743\u9650\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco ESA\u548cContent SMA\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco Email Security Appliance 9.7.1-066",
      "Cisco Content SMA",
      "Cisco Email Security Appliance 10.0.0-085",
      "Cisco Content Security Management Appliance (SMA) 9.7.0-006"
    ]
  },
  "referenceLink": "https://www.securityfocus.com/bid/102729",
  "serverity": "\u9ad8",
  "submitTime": "2018-01-18",
  "title": "Cisco ESA\u548cContent SMA\u6743\u9650\u63d0\u5347\u6f0f\u6d1e"
}

CVE-2018-0095 (GCVE-0-2018-0095)

Vulnerability from cvelistv5

Published

2018-01-18 06:00

Modified

2024-12-02 21:44

Severity ?

CWE

CWE-264

Summary

A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA) could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential with at least a privilege level of a guest user. The vulnerability is due to an incorrect networking configuration at the administrative shell CLI. An attacker could exploit this vulnerability by authenticating to the targeted device and issuing a set of crafted, malicious commands at the administrative shell. An exploit could allow the attacker to gain root access on the device. Cisco Bug IDs: CSCvb34303, CSCvb35726.

References

URL

Tags

	http://www.securitytracker.com/id/1040221	vdb-entry, x_refsource_SECTRACK
	http://www.securitytracker.com/id/1040222	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/102729	vdb-entry, x_refsource_BID
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-esasma	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	Cisco Email Security and Content Security Management Appliance	Version: Cisco Email Security and Content Security Management Appliance

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:14:16.648Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1040221",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040221"
          },
          {
            "name": "1040222",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040222"
          },
          {
            "name": "102729",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102729"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-esasma"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-0095",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-02T19:09:11.902440Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-02T21:44:20.635Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Email Security and Content Security Management Appliance",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Cisco Email Security and Content Security Management Appliance"
            }
          ]
        }
      ],
      "datePublic": "2018-01-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA) could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential with at least a privilege level of a guest user. The vulnerability is due to an incorrect networking configuration at the administrative shell CLI. An attacker could exploit this vulnerability by authenticating to the targeted device and issuing a set of crafted, malicious commands at the administrative shell. An exploit could allow the attacker to gain root access on the device. Cisco Bug IDs: CSCvb34303, CSCvb35726."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-264",
              "description": "CWE-264",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-01-19T10:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "1040221",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040221"
        },
        {
          "name": "1040222",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040222"
        },
        {
          "name": "102729",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102729"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-esasma"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2018-0095",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco Email Security and Content Security Management Appliance",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Cisco Email Security and Content Security Management Appliance"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA) could allow an authenticated, local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential with at least a privilege level of a guest user. The vulnerability is due to an incorrect networking configuration at the administrative shell CLI. An attacker could exploit this vulnerability by authenticating to the targeted device and issuing a set of crafted, malicious commands at the administrative shell. An exploit could allow the attacker to gain root access on the device. Cisco Bug IDs: CSCvb34303, CSCvb35726."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-264"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1040221",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040221"
            },
            {
              "name": "1040222",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040222"
            },
            {
              "name": "102729",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102729"
            },
            {
              "name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-esasma",
              "refsource": "CONFIRM",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-esasma"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2018-0095",
    "datePublished": "2018-01-18T06:00:00",
    "dateReserved": "2017-11-27T00:00:00",
    "dateUpdated": "2024-12-02T21:44:20.635Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

cnvd-2018-03161

Vulnerability from cnvd

CVE-2018-0095 (GCVE-0-2018-0095)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature