cnvd - cnvd-2018-18798

cnvd-2018-18798

Vulnerability from cnvd

Title: Cisco Network Services Orchestrator Network Plug and Play server组件权限访问控制漏洞

Description:

Cisco Network Services Orchestrator（NSO）是美国思科（Cisco）公司的一套网络自动化服务解决方案。Network Plug and Play server是其中的一个网络即插即用服务器组件。

Cisco NSO中的Network Plug and Play server组件存在权限访问控制漏洞，该漏洞源于在该组件被配置使用SUDI（安全唯一设备标识符）进行身份验证时，程序未能执行完整的身份验证。远程攻击者可借助有关NSO服务器上所注册设备的信息向受影响的系统发送特制的Cisco Network Plug and Play身份验证数据包利用该漏洞获取设备配置数据的未授权访问权限。

Severity: 中

Patch Name: Cisco Network Services Orchestrator Network Plug and Play server组件权限访问控制漏洞的补丁

Patch Description:

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-nso-infodis

Reference: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-nso-infodis

Impacted products

Name
Cisco Network Services Orchestrator Network Plug and Play server

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0463"
    }
  },
  "description": "Cisco Network Services Orchestrator\uff08NSO\uff09\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u7f51\u7edc\u81ea\u52a8\u5316\u670d\u52a1\u89e3\u51b3\u65b9\u6848\u3002Network Plug and Play server\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u7f51\u7edc\u5373\u63d2\u5373\u7528\u670d\u52a1\u5668\u7ec4\u4ef6\u3002\r\n\r\nCisco NSO\u4e2d\u7684Network Plug and Play server\u7ec4\u4ef6\u5b58\u5728\u6743\u9650\u8bbf\u95ee\u63a7\u5236\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5728\u8be5\u7ec4\u4ef6\u88ab\u914d\u7f6e\u4f7f\u7528SUDI\uff08\u5b89\u5168\u552f\u4e00\u8bbe\u5907\u6807\u8bc6\u7b26\uff09\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u65f6\uff0c\u7a0b\u5e8f\u672a\u80fd\u6267\u884c\u5b8c\u6574\u7684\u8eab\u4efd\u9a8c\u8bc1\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u501f\u52a9\u6709\u5173NSO\u670d\u52a1\u5668\u4e0a\u6240\u6ce8\u518c\u8bbe\u5907\u7684\u4fe1\u606f\u5411\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u53d1\u9001\u7279\u5236\u7684Cisco Network Plug and Play\u8eab\u4efd\u9a8c\u8bc1\u6570\u636e\u5305\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u8bbe\u5907\u914d\u7f6e\u6570\u636e\u7684\u672a\u6388\u6743\u8bbf\u95ee\u6743\u9650\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-nso-infodis",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-18798",
  "openTime": "2018-09-13",
  "patchDescription": "Cisco Network Services Orchestrator\uff08NSO\uff09\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u7f51\u7edc\u81ea\u52a8\u5316\u670d\u52a1\u89e3\u51b3\u65b9\u6848\u3002Network Plug and Play server\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u7f51\u7edc\u5373\u63d2\u5373\u7528\u670d\u52a1\u5668\u7ec4\u4ef6\u3002\r\n\r\nCisco NSO\u4e2d\u7684Network Plug and Play server\u7ec4\u4ef6\u5b58\u5728\u6743\u9650\u8bbf\u95ee\u63a7\u5236\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5728\u8be5\u7ec4\u4ef6\u88ab\u914d\u7f6e\u4f7f\u7528SUDI\uff08\u5b89\u5168\u552f\u4e00\u8bbe\u5907\u6807\u8bc6\u7b26\uff09\u8fdb\u884c\u8eab\u4efd\u9a8c\u8bc1\u65f6\uff0c\u7a0b\u5e8f\u672a\u80fd\u6267\u884c\u5b8c\u6574\u7684\u8eab\u4efd\u9a8c\u8bc1\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u501f\u52a9\u6709\u5173NSO\u670d\u52a1\u5668\u4e0a\u6240\u6ce8\u518c\u8bbe\u5907\u7684\u4fe1\u606f\u5411\u53d7\u5f71\u54cd\u7684\u7cfb\u7edf\u53d1\u9001\u7279\u5236\u7684Cisco Network Plug and Play\u8eab\u4efd\u9a8c\u8bc1\u6570\u636e\u5305\u5229\u7528\u8be5\u6f0f\u6d1e\u83b7\u53d6\u8bbe\u5907\u914d\u7f6e\u6570\u636e\u7684\u672a\u6388\u6743\u8bbf\u95ee\u6743\u9650\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Network Services Orchestrator Network Plug and Play server\u7ec4\u4ef6\u6743\u9650\u8bbf\u95ee\u63a7\u5236\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Cisco Network Services Orchestrator Network Plug and Play server"
  },
  "referenceLink": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-nso-infodis",
  "serverity": "\u4e2d",
  "submitTime": "2018-09-07",
  "title": "Cisco Network Services Orchestrator Network Plug and Play server\u7ec4\u4ef6\u6743\u9650\u8bbf\u95ee\u63a7\u5236\u6f0f\u6d1e"
}

CVE-2018-0463 (GCVE-0-2018-0463)

Vulnerability from cvelistv5

Published

2018-10-05 14:00

Modified

2024-11-26 14:39

Severity ?

CWE

CWE-264

Summary

A vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to gain unauthorized access to configuration data that is stored on an affected NSO system. The vulnerability exists because the Network Plug and Play component performs incomplete validation when configured to use secure unique device identifiers (SUDI) for authentication. An attacker who controls a Cisco device that supports SUDI authentication and has connectivity to an affected NSO system could exploit this vulnerability. The attacker would need to leverage information about the devices that are being registered on the NSO server to send crafted Cisco Network Plug and Play authentication packets to an affected system. A successful exploit could allow the attacker to gain unauthorized access to configuration data for devices that will be managed by the NSO system.

References

▼	URL	Tags
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-nso-infodis	vendor-advisory, x_refsource_CISCO

Impacted products

	Vendor	Product	Version
	Cisco	Cisco Network Services Orchestrator	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:28:11.047Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20180905 Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-nso-infodis"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-0463",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-25T18:53:26.786615Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-26T14:39:29.333Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Network Services Orchestrator",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2018-09-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to gain unauthorized access to configuration data that is stored on an affected NSO system. The vulnerability exists because the Network Plug and Play component performs incomplete validation when configured to use secure unique device identifiers (SUDI) for authentication. An attacker who controls a Cisco device that supports SUDI authentication and has connectivity to an affected NSO system could exploit this vulnerability. The attacker would need to leverage information about the devices that are being registered on the NSO server to send crafted Cisco Network Plug and Play authentication packets to an affected system. A successful exploit could allow the attacker to gain unauthorized access to configuration data for devices that will be managed by the NSO system."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-264",
              "description": "CWE-264",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-05T13:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20180905 Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-nso-infodis"
        }
      ],
      "source": {
        "advisory": "cisco-sa-20180905-nso-infodis",
        "defect": [
          [
            "CSCvj50567",
            "CSCvk74975"
          ]
        ],
        "discovery": "UNKNOWN"
      },
      "title": "Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2018-09-05T16:00:00-0500",
          "ID": "CVE-2018-0463",
          "STATE": "PUBLIC",
          "TITLE": "Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco Network Services Orchestrator",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to gain unauthorized access to configuration data that is stored on an affected NSO system. The vulnerability exists because the Network Plug and Play component performs incomplete validation when configured to use secure unique device identifiers (SUDI) for authentication. An attacker who controls a Cisco device that supports SUDI authentication and has connectivity to an affected NSO system could exploit this vulnerability. The attacker would need to leverage information about the devices that are being registered on the NSO server to send crafted Cisco Network Plug and Play authentication packets to an affected system. A successful exploit could allow the attacker to gain unauthorized access to configuration data for devices that will be managed by the NSO system."
            }
          ]
        },
        "impact": {
          "cvss": {
            "baseScore": "5.9",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-264"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20180905 Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-nso-infodis"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-20180905-nso-infodis",
          "defect": [
            [
              "CSCvj50567",
              "CSCvk74975"
            ]
          ],
          "discovery": "UNKNOWN"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2018-0463",
    "datePublished": "2018-10-05T14:00:00Z",
    "dateReserved": "2017-11-27T00:00:00",
    "dateUpdated": "2024-11-26T14:39:29.333Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted