CVE-2018-0350

highPriorität · verfolgen · 36EPSS 0.030 · 87. PerzentilEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

3.02% (87th) EPSS

CVSS 9 · high

Is it mine?

14 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · cisco_csaf · nvd

EPSS · bewertet 2026-10-22

A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the affected parameter in a web page. The attacker must be authenticated to access the affected parameter. A successful exploit could allow the attacker to execute commands with root privileges. This vulnerability affects the following Cisco products if they are running a release of the Cisco SD-WAN Solution prior to Release 18.3.0: vBond Orchestrator Software, vEdge 100 Series Routers, vEdge 1000 Series Routers, vEdge 2000 Series Routers, vEdge 5000 Series Routers, vEdge Cloud Router Platform, vManage Network Management Software, vSmart Controller Software. Cisco Bug IDs: CSCvi69808, CSCvi69810, CSCvi69814, CSCvi69822, CSCvi69827, CSCvi69828, CSCvi69836.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenCisco SD-WAN Solutioncisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.0

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.09highAV:N/AC:L/Au:S/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 8 · Auswirkung 10

v3.08.8highCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 5.9

v3.08.1highCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.07.2highCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Hsecondary · Cisco PSIRT US

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-77USprimär

betroffene Produkte (14)

Betroffene Produkte und Versionsbereiche.

Cisco Cisco SD-WAN Solutionalle Versionencisco_csafUS
n/a Cisco SD-WAN Solution unknown≤ Cisco SD-WAN Solution unknownenisa_euvdEU
cisco vbond orchestratoralle VersionennvdUScpe:2.3:a:cisco:vbond_orchestrator:*:*:*:*:*:*:*:*
cisco vedge 100b firmware< 18.3.0nvdUScpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*
cisco vedge 100m firmware< 18.3.0nvdUScpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*
cisco vedge 100wm firmware< 18.3.0nvdUScpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*
cisco vedge-100 firmware< 18.3.0nvdUScpe:2.3:o:cisco:vedge-100_firmware:*:*:*:*:*:*:*:*
cisco vedge-1000 firmware< 18.3.0nvdUScpe:2.3:o:cisco:vedge-1000_firmware:*:*:*:*:*:*:*:*
cisco vedge-2000 firmware< 18.3.0nvdUScpe:2.3:o:cisco:vedge-2000_firmware:*:*:*:*:*:*:*:*
cisco vedge-5000 firmware< 18.3.0nvdUScpe:2.3:o:cisco:vedge-5000_firmware:*:*:*:*:*:*:*:*
cisco vedge-plusalle VersionennvdUScpe:2.3:a:cisco:vedge-plus:*:*:*:*:*:*:*:*
cisco vedge-proalle VersionennvdUScpe:2.3:a:cisco:vedge-pro:*:*:*:*:*:*:*:*
cisco vmanage network managementalle VersionennvdUScpe:2.3:a:cisco:vmanage_network_management:*:*:*:*:*:*:*:*
cisco vsmart controlleralle VersionennvdUScpe:2.3:a:cisco:vsmart_controller:*:*:*:*:*:*:*:*

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

cisco-sa-20180718-sdwan-cmdinjCisco SD-WAN Solution VPN Subsystem Command Injection Vulnerability2018-07-18csaf · cisco_csafUS
A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the affected parameter in a web page. The attacker must be authenticated to access the affected parameter. A successful exploit could allow the attacker to execute commands with root privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-sdwan-cmdinj ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-sdwan-cmdinj"]

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cisco_csaf nvd NVD CVE.org MITRE

veröffentlicht 2018-07-18geändert 2026-06-17

verwandt (4,574)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-96951US	high8.8OT kritisch	1.51% (74th)	KEV	2026-10-13
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-105134US	critical10.0OT kritisch	38.3% (99th)	KEV	2026-10-04
A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Ex…
CVE-2026-8037US	critical9.8OT kritisch	77.4% (100th)	KEV	2026-06-04
OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster applian…
CVE-2026-42271US	high8.8OT kritisch	92.6% (100th)	KEV	2026-05-08
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server befo…
CVE-2026-22719US	—OT kritisch	18.1% (97th)	KEV	2026-02-25
VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor may exploit this issue to execute arbitrary commands which may lead to remote c…

+4569 weitere

Referenzen (6)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan