PT-2018-8851 · Cisco · Cisco Isr4451-X+4

Publicado 2018-09-26 · Atualizado 2019-10-09 · CVE-2018-0485

Positive Technologies (AI Summary)

CVSS v3.1

8.6

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Second Generation Integrated Services Routers (ISR G2) (affected versions not specified) Cisco 4451-X Integrated Services Router (ISR4451-X) (affected versions not specified)

Description A vulnerability in the SM-1T3/E3 firmware could allow an unauthenticated, remote attacker to cause the ISR G2 Router or the SM-1T3/E3 module on the ISR4451-X to reload, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of user input. An attacker could exploit this vulnerability by first connecting to the SM-1T3/E3 module console and entering a string sequence.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Enumeração de Fraquezas

CWE-19

CWE-20

Identificadores relacionados

CVE-2018-0485

Produtos afetados

Cisco Isr G2

Cisco Isr4451-X

Cisco Ios

Cisco Ios Xe

Sm-1T3/E3

Referências · 6

• https://osv.dev/vulnerability/CVE-2018-0485 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-sm1t3e3 · Aviso do Fabricante
• http://securityfocus.com/bid/105433 · Nota
• http://securitytracker.com/id/1041736 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-0485 · Nota de Segurança
• http://securitytracker.com/id/1041737 · Nota