PT-2018-1780 · Cisco · Cisco Energy Management Suite

Published 2018-11-07 · Updated 2019-10-09 · CVE-2018-15445

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Energy Management Suite Software (affected versions not specified)

Description The issue is related to insufficient CSRF protections in the web-based management interface, allowing an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack. This could enable the attacker to perform arbitrary actions on an affected device by persuading an authenticated user to follow a crafted link. The exploit could allow the attacker to act with the privileges of the user, via a web browser.

Recommendations For Cisco Energy Management Suite Software, consider implementing additional CSRF protections for the web-based management interface to prevent exploitation. As a temporary workaround, restrict access to the web-based management interface to minimize the risk of exploitation. Avoid using the interface with untrusted or unknown links to prevent potential CSRF attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

BDU:2018-01380

CVE-2018-15445

Affected Products

Cisco Energy Management Suite

References · 8

• 🔥 https://tenable.com/security/research/tra-2018-36 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-15445 · Security Note
• https://bdu.fstec.ru/vul/2018-01380 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-ems-csrf · Vendor Advisory
• https://securitylab.ru/vulnerability/496349.php · Note
• https://cybersecurity-help.cz/vdb/SB2018110809?affChecked=1 · Note
• http://securityfocus.com/bid/105859 · Note
• https://securityfocus.com/bid/105520/discuss · Note