PT-2018-8697 · Cisco · Cisco 8500 Series Wireless Lan Controller+2

Publicado 2018-05-02 · Atualizado 2020-09-04 · CVE-2018-0245

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Cisco 5500 and 8500 Series Wireless LAN Controller (WLC) Software (affected versions not specified)

Description: A vulnerability in the REST API could allow an unauthenticated, remote attacker to view system information that should be prohibited. The issue is due to incomplete input and validation checking mechanisms in the REST API URL request. An attacker could exploit this by sending a malicious URL to the REST API, potentially allowing them to view sensitive system information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Improper Privilege Management

Enumeração de Fraquezas

CWE-200

CWE-269

Identificadores relacionados

CVE-2018-0245

Produtos afetados

Cisco 5500 Series Wireless Lan Controller

Cisco 8500 Series Wireless Lan Controller

Cisco Wls

Referências · 5

• https://osv.dev/vulnerability/CVE-2018-0245 · Aviso do Fabricante
• http://securityfocus.com/bid/104123 · Nota
• http://securitytracker.com/id/1040823 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0245 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-wlc-id · Aviso do Fabricante