Vulnerability Details : CVE-2018-0346
A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to the Zero Touch Provisioning service of the affected software. An attacker could exploit this vulnerability by sending malicious packets to the affected software for processing. When the software processes the packets, a buffer overflow condition could occur and cause an affected device to reload. A successful exploit could allow the attacker to cause a temporary DoS condition while the device reloads. This vulnerability can be exploited only by traffic that is destined for an affected device. It cannot be exploited by traffic that is transiting a device. This vulnerability affects the following Cisco products if they are running a release of the Cisco SD-WAN Solution prior to Release 18.3.0: vBond Orchestrator Software, vManage Network Management Software, vSmart Controller Software. Cisco Bug IDs: CSCvi69914.
Vulnerability category: OverflowDenial of service
Products affected by CVE-2018-0346
- cpe:2.3:a:cisco:vbond_orchestrator:-:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:vedge-plus:-:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:vedge-pro:-:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:vmanage_network_management:-:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:vsmart_controller:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:vedge-100_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:vedge-1000_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:vedge-2000_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:vedge-5000_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-0346
0.13%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 48 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-0346
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.8
|
HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
10.0
|
6.9
|
NIST | |
|
7.5
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2018-0346
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by:
- nvd@nist.gov (Primary)
- ykramarz@cisco.com (Secondary)
References for CVE-2018-0346
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-sdwan-dos
Cisco SD-WAN Solution Zero Touch Provisioning Denial of Service VulnerabilityVendor Advisory
-
http://www.securityfocus.com/bid/104855
Cisco SD-WAN Zero Touch Provisioning CVE-2018-0346 Denial of Service VulnerabilityThird Party Advisory;VDB Entry
Jump to