DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Cisco IOS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2018-03-28
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Cisco IOS und Cisco IOS XE ausnutzen, um Daten zu manipulieren, vertrauliche Daten einzusehen, einen Denial of Service Angriff durchzuführen, seine Privilegien zu erweitern, Cross-Site Scripting Angriffe durchzuführen, Sicherheitsmechanismen zu umgehen oder beliebigen Code mit administrativen Privilegien zur Ausführung zu bringen.
01
beschreibt (34)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-0194US | high7.8 | — | ||
Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software,… | ||||
| CVE-2018-0196US | medium4.9 | — | ||
A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker to write arbitrary files to the operating system of… | ||||
| CVE-2018-0195US | high8.8 | — | ||
A vulnerability in the Cisco IOS XE Software REST API could allow an authenticated, remote attacker to bypass API authorization checks and use the API to perform privileged actions… | ||||
| CVE-2018-0193US | high7.8 | — | ||
Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software,… | ||||
| CVE-2018-0190US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) a… | ||||
| CVE-2018-0189US | medium5.3 | — | ||
A vulnerability in the Forwarding Information Base (FIB) code of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, network attacker to cause a denial of… | ||||
| CVE-2018-0188US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) a… | ||||
| CVE-2018-0186US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based user interface (web UI) of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) a… | ||||
| CVE-2018-0185US | high7.8 | — | ||
Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software,… | ||||
| CVE-2018-0184US | medium6.7 | — | ||
A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execu… | ||||
| CVE-2018-0183US | medium6.7 | — | ||
A vulnerability in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execu… | ||||
| CVE-2018-0182US | high7.8 | — | ||
Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to inject arbitrary commands into the CLI of the affected software,… | ||||
| CVE-2018-0180US | medium5.9OT kritisch | KEV | ||
Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected sy… | ||||
| CVE-2018-0179US | medium5.9OT kritisch | KEV | ||
Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected sy… | ||||
| CVE-2018-0176US | high7.8 | — | ||
Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device… | ||||
| CVE-2018-0174US | high8.6OT kritisch | KEV | ||
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affect… | ||||
| CVE-2018-0173US | high8.6OT kritisch | KEV | ||
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCPv4) packets could allow an unau… | ||||
| CVE-2018-0172US | high8.6OT kritisch | KEV | ||
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affect… | ||||
| CVE-2018-0171US | critical9.8OT kritisch | KEV | ||
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected devi… | ||||
| CVE-2018-0170US | high7.5 | — | ||
A vulnerability in the Cisco Umbrella Integration feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition, rel… | ||||
20 von 34 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- FBI Alert I-082025-PSA vom 2025-08-20external
- Cisco Security Advisory cisco-sa-20180328-smi2 vom 2025-08-20external
- Cisco Security Advisory cisco-sa-20180328-FIB-dos vom 2018-03-28external
- Cisco Security Advisory cisco-sa-20180328-cmdinj vom 2018-03-28external
- Cisco Security Advisory cisco-sa-20180328-dhcpr1 vom 2018-03-28external
- Cisco Security Advisory cisco-sa-20180328-dhcpr2 vom 2018-03-28external
- Cisco Security Advisory cisco-sa-20180328-dhcpr3 vom 2018-03-28external
- Cisco Security Advisory cisco-sa-20180328-dos vom 2018-03-28external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan