PT-2018-1364 · Cisco · Cisco Policy Suite

Published 2018-07-18 · Updated 2019-10-09 · CVE-2018-0375

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Policy Suite versions prior to 18.2.0

Description A vulnerability in the Cluster Manager of Cisco Policy Suite is due to the presence of undocumented, static user credentials for the root account. An attacker could exploit this vulnerability by using the account to log in to an affected system, allowing them to execute arbitrary commands as the root user. The vulnerability could be exploited by an unauthenticated, remote attacker.

Recommendations For versions prior to 18.2.0, update to version 18.2.0 or later to resolve the issue. As a temporary workaround, consider changing the default, static user credentials for the root account to prevent unauthorized access. Restrict access to the Cluster Manager component to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2018-00907

CVE-2018-0375

Affected Products

Cisco Policy Suite

References · 7

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-policy-cm-default-psswrd · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0375 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00907 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-0375 · Security Note
• https://securitylab.ru/news/494535.php · Note
• http://securityfocus.com/bid/104852 · Note
• https://threatpost.com/critical-authentication-flaws-in-cisco-policy-suite-patched/134158 · Note