PT-2018-8774 · Cisco · Vbond Orchestrator+3

Published 2018-07-18 · Updated 2019-10-09 · CVE-2018-0346

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Solution versions prior to 18.3.0 vBond Orchestrator Software versions prior to 18.3.0 vManage Network Management Software versions prior to 18.3.0 vSmart Controller Software versions prior to 18.3.0

Description A vulnerability in the Zero Touch Provisioning service could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The issue is due to incorrect bounds checks for certain values in packets sent to the Zero Touch Provisioning service. An attacker could exploit this by sending malicious packets, potentially causing a buffer overflow condition and leading to a device reload. A successful exploit could allow the attacker to cause a temporary DoS condition while the device reloads. This vulnerability can only be exploited by traffic destined for an affected device.

Recommendations For Cisco SD-WAN Solution versions prior to 18.3.0, update to Release 18.3.0 or later. For vBond Orchestrator Software versions prior to 18.3.0, update to Release 18.3.0 or later. For vManage Network Management Software versions prior to 18.3.0, update to Release 18.3.0 or later. For vSmart Controller Software versions prior to 18.3.0, update to Release 18.3.0 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-0346

Affected Products

Cisco Sd-Wan Solution

Vbond Orchestrator

Vmanage Network Management

Vsmart Controller

References · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-sdwan-dos · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-0346 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0346 · Security Note
• http://securityfocus.com/bid/104855 · Note