CVE-2018-0275

{"id": "CVE-2018-0275", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2018-04-19T20:29:01.783", "references": [{"url": "http://www.securitytracker.com/id/1040717", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-ise", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1040717", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180418-ise", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-16"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the support tunnel feature of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to access the device's shell. The vulnerability is due to improper configuration of the support tunnel feature. An attacker could exploit this vulnerability by tricking the device into unlocking the support user account and accessing the tunnel password and device serial number. A successful exploit could allow the attacker to run any system command with root access. This affects Cisco Identity Services Engine (ISE) software versions prior to 2.2.0.470. Cisco Bug IDs: CSCvf54409."}, {"lang": "es", "value": "Una vulnerabilidad en la caracter\u00edstica de t\u00fanel de soporte de Cisco Identity Services Engine (ISE) podr\u00eda permitir que un atacante remoto sin autenticar acceda al shell del dispositivo. La vulnerabilidad se debe a la configuraci\u00f3n inadecuada de la caracter\u00edstica de t\u00fanel de soporte. Un atacante podr\u00eda explotar esta vulnerabilidad enga\u00f1ando al dispositivo para que desbloquee la cuenta de usuario de soporte y acceda a la contrase\u00f1a del t\u00fanel y al n\u00famero de serie del dispositivo. Un exploit con \u00e9xito podr\u00eda permitir que el atacante ejecute cualquier comando del sistema con acceso root. Esto afecta al software Cisco Identity Services Engine (ISE) en versiones anteriores a la 2.2.0.470. Cisco Bug IDs: CSCvf54409."}], "lastModified": "2024-11-21T03:37:52.507", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:identity_services_engine:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0365ACC-1E6D-4E79-ACE4-C9D42A442AD9", "versionEndExcluding": "2.2\\(0.470\\)"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}