PT-2018-8789 · Cisco · Cisco Unified Computing (Ucs) E-Series Servers+1

Published 2018-06-21 · Updated 2019-10-09 · CVE-2018-0362

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco 5000 Series Enterprise Network Compute System and Cisco Unified Computing (UCS) E-Series Servers (affected versions not specified)

Description A security issue in BIOS authentication management could allow an unauthenticated, local attacker to bypass BIOS authentication and execute actions as an unprivileged user. This is due to improper security restrictions imposed by the affected system. An attacker could exploit this by submitting an empty password value to the BIOS authentication prompt, potentially gaining access to a restricted set of user-level BIOS commands.

Recommendations For Cisco 5000 Series Enterprise Network Compute System and Cisco Unified Computing (UCS) E-Series Servers, as a temporary workaround, consider restricting access to the BIOS authentication prompt until a patch is available. Avoid submitting empty password values to the BIOS authentication prompt to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2018-0362

Affected Products

Cisco 5000 Series Enterprise Network Compute System

Cisco Unified Computing (Ucs) E-Series Servers

References · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-encs-ucs-bios-auth-bypass · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0362 · Security Note
• https://osv.dev/vulnerability/CVE-2018-0362 · Vendor Advisory
• http://securitytracker.com/id/1041173 · Note