Vulnerability Details : CVE-2018-0214
A vulnerability in certain CLI commands of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with the privileges of the local user, aka Command Injection. These commands should have been restricted from this user. The vulnerability is due to insufficient input validation of CLI command user input. An attacker could exploit this vulnerability by authenticating to the targeted device and issuing a CLI command with crafted user input. A successful exploit could allow the attacker to execute arbitrary commands on the affected system that should be restricted. The attacker would need to have valid user credentials for the device. Cisco Bug IDs: CSCvf49844.
Vulnerability category: Input validation
Products affected by CVE-2018-0214
- cpe:2.3:a:cisco:identity_services_engine:2.1\(102.103\):*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-0214
0.27%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 48 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-0214
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST | |
|
5.3
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
1.8
|
3.4
|
NIST |
CWE ids for CVE-2018-0214
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: ykramarz@cisco.com (Secondary)
-
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-0214
-
http://www.securitytracker.com/id/1040471
Cisco Identity Services Engine Multiple Bugs Let Local Users Deny Service, Remote Users Conduct Cross-Site Scripting and Cross-Site Request Forgery Attacks, and Let Remote Authenticated Users Gain EleThird Party Advisory;VDB Entry
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180307-ise3
Cisco Identity Services Engine Local Command Injection VulnerabilityVendor Advisory
-
http://www.securityfocus.com/bid/103331
Cisco Identity Services Engine CVE-2018-0214 Local Command Injection VulnerabilityThird Party Advisory;VDB Entry
Jump to