PT-2018-8722 · Linux+1 · Linux+1

Published 2018-05-17 · Updated 2020-09-04 · CVE-2018-0279

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Cisco Enterprise NFV Infrastructure Software (NFVIS) versions 3.7.1 and earlier

Description: A vulnerability in the Secure Copy Protocol (SCP) server could allow an authenticated, remote attacker to access the shell of the underlying Linux operating system on the affected device. This is due to improper input validation of command arguments, which an attacker could exploit by using crafted arguments when opening a connection to the affected device. An exploit could allow the attacker to gain shell access with a non-root user account to the underlying Linux operating system, potentially enabling execution of additional attacks that may have a significant impact on the affected system.

Recommendations: For Cisco Enterprise NFV Infrastructure Software (NFVIS) versions 3.7.1 and earlier, restrict access to the SCP server to minimize the risk of exploitation. Consider disabling the SCP server until a patch is available.

Fix

OS Command Injection

RCE

Weakness Enumeration

CWE-78

CWE-20

Related Identifiers

CVE-2018-0279

Affected Products

Cisco Enterprise Nfv Infrastructure

Linux

References · 4

• https://osv.dev/vulnerability/CVE-2018-0279 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0279 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180516-nfvis · Vendor Advisory
• http://securityfocus.com/bid/104243 · Note