cnvd - cnvd-2018-14575

cnvd-2018-14575

Vulnerability from cnvd

Title: Cisco 5000 Series Enterprise Network Compute System和UCS E-Series Servers认证绕过漏洞

Description:

Cisco 5000 Series Enterprise Network Compute System和UCS E-Series Servers都是美国思科（Cisco）公司的产品。Cisco 5000 Series Enterprise Network Compute System是一套企业网络功能虚拟化解决方案。UCS E-Series Servers是一款数据中心级刀片服务器设备。

Cisco 5000 Series Enterprise Network Compute System和UCS E-Series Servers中的BIOS身份验证管理存在认证绕过漏洞，该漏洞源于受影响的系统未能执行正确的安全限制。本地攻击者可通过向受影响设备的BIOS身份验证对话框提交空密码值利用该漏洞访问受限制的BIOS命令。

Severity: 中

Patch Name: Cisco 5000 Series Enterprise Network Compute System和UCS E-Series Servers认证绕过漏洞的补丁

Patch Description:

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh83260

Reference: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh83260

Impacted products

Name
['Cisco 5000 Series Enterprise Network Compute System 0', 'Cisco Unified Computing (UCS) E-Series Servers']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0362",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0362"
    }
  },
  "description": "Cisco 5000 Series Enterprise Network Compute System\u548cUCS E-Series Servers\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco 5000 Series Enterprise Network Compute System\u662f\u4e00\u5957\u4f01\u4e1a\u7f51\u7edc\u529f\u80fd\u865a\u62df\u5316\u89e3\u51b3\u65b9\u6848\u3002UCS E-Series Servers\u662f\u4e00\u6b3e\u6570\u636e\u4e2d\u5fc3\u7ea7\u5200\u7247\u670d\u52a1\u5668\u8bbe\u5907\u3002\r\n\r\nCisco 5000 Series Enterprise Network Compute System\u548cUCS E-Series Servers\u4e2d\u7684BIOS\u8eab\u4efd\u9a8c\u8bc1\u7ba1\u7406\u5b58\u5728\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u672a\u80fd\u6267\u884c\u6b63\u786e\u7684\u5b89\u5168\u9650\u5236\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u53d7\u5f71\u54cd\u8bbe\u5907\u7684BIOS\u8eab\u4efd\u9a8c\u8bc1\u5bf9\u8bdd\u6846\u63d0\u4ea4\u7a7a\u5bc6\u7801\u503c\u5229\u7528\u8be5\u6f0f\u6d1e\u8bbf\u95ee\u53d7\u9650\u5236\u7684BIOS\u547d\u4ee4\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh83260",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-14575",
  "openTime": "2018-08-03",
  "patchDescription": "Cisco 5000 Series Enterprise Network Compute System\u548cUCS E-Series Servers\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco 5000 Series Enterprise Network Compute System\u662f\u4e00\u5957\u4f01\u4e1a\u7f51\u7edc\u529f\u80fd\u865a\u62df\u5316\u89e3\u51b3\u65b9\u6848\u3002UCS E-Series Servers\u662f\u4e00\u6b3e\u6570\u636e\u4e2d\u5fc3\u7ea7\u5200\u7247\u670d\u52a1\u5668\u8bbe\u5907\u3002\r\n\r\nCisco 5000 Series Enterprise Network Compute System\u548cUCS E-Series Servers\u4e2d\u7684BIOS\u8eab\u4efd\u9a8c\u8bc1\u7ba1\u7406\u5b58\u5728\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u672a\u80fd\u6267\u884c\u6b63\u786e\u7684\u5b89\u5168\u9650\u5236\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u5411\u53d7\u5f71\u54cd\u8bbe\u5907\u7684BIOS\u8eab\u4efd\u9a8c\u8bc1\u5bf9\u8bdd\u6846\u63d0\u4ea4\u7a7a\u5bc6\u7801\u503c\u5229\u7528\u8be5\u6f0f\u6d1e\u8bbf\u95ee\u53d7\u9650\u5236\u7684BIOS\u547d\u4ee4\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco 5000 Series Enterprise Network Compute System\u548cUCS E-Series Servers\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco 5000 Series Enterprise Network Compute System 0",
      "Cisco Unified Computing (UCS) E-Series Servers"
    ]
  },
  "referenceLink": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh83260",
  "serverity": "\u4e2d",
  "submitTime": "2018-06-26",
  "title": "Cisco 5000 Series Enterprise Network Compute System\u548cUCS E-Series Servers\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e"
}

CVE-2018-0362 (GCVE-0-2018-0362)

Vulnerability from cvelistv5

Published

2018-06-21 11:00

Modified

2024-11-29 14:56

Severity ?

CWE

CWE-287

Summary

A vulnerability in BIOS authentication management of Cisco 5000 Series Enterprise Network Compute System and Cisco Unified Computing (UCS) E-Series Servers could allow an unauthenticated, local attacker to bypass the BIOS authentication and execute actions as an unprivileged user. The vulnerability is due to improper security restrictions that are imposed by the affected system. An attacker could exploit this vulnerability by submitting an empty password value to an affected device's BIOS authentication prompt. An exploit could allow the attacker to have access to a restricted set of user-level BIOS commands. Cisco Bug IDs: CSCvh83260.

References

▼	URL	Tags
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-encs-ucs-bios-auth-bypass	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1041173	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	n/a	Cisco 5000 Series Enterprise Network Compute System and Cisco UCS E-Series Servers unknown	Version: Cisco 5000 Series Enterprise Network Compute System and Cisco UCS E-Series Servers unknown

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:21:15.375Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-encs-ucs-bios-auth-bypass"
          },
          {
            "name": "1041173",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1041173"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-0362",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-29T14:37:32.925327Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-29T14:56:24.119Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco 5000 Series Enterprise Network Compute System and Cisco UCS E-Series Servers unknown",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Cisco 5000 Series Enterprise Network Compute System and Cisco UCS E-Series Servers unknown"
            }
          ]
        }
      ],
      "datePublic": "2018-06-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in BIOS authentication management of Cisco 5000 Series Enterprise Network Compute System and Cisco Unified Computing (UCS) E-Series Servers could allow an unauthenticated, local attacker to bypass the BIOS authentication and execute actions as an unprivileged user. The vulnerability is due to improper security restrictions that are imposed by the affected system. An attacker could exploit this vulnerability by submitting an empty password value to an affected device\u0027s BIOS authentication prompt. An exploit could allow the attacker to have access to a restricted set of user-level BIOS commands. Cisco Bug IDs: CSCvh83260."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-06-22T09:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-encs-ucs-bios-auth-bypass"
        },
        {
          "name": "1041173",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1041173"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2018-0362",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco 5000 Series Enterprise Network Compute System and Cisco UCS E-Series Servers unknown",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Cisco 5000 Series Enterprise Network Compute System and Cisco UCS E-Series Servers unknown"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in BIOS authentication management of Cisco 5000 Series Enterprise Network Compute System and Cisco Unified Computing (UCS) E-Series Servers could allow an unauthenticated, local attacker to bypass the BIOS authentication and execute actions as an unprivileged user. The vulnerability is due to improper security restrictions that are imposed by the affected system. An attacker could exploit this vulnerability by submitting an empty password value to an affected device\u0027s BIOS authentication prompt. An exploit could allow the attacker to have access to a restricted set of user-level BIOS commands. Cisco Bug IDs: CSCvh83260."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-287"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-encs-ucs-bios-auth-bypass",
              "refsource": "CONFIRM",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-encs-ucs-bios-auth-bypass"
            },
            {
              "name": "1041173",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1041173"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2018-0362",
    "datePublished": "2018-06-21T11:00:00",
    "dateReserved": "2017-11-27T00:00:00",
    "dateUpdated": "2024-11-29T14:56:24.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted