CVE-2018-0176: OS Command Injection
First published: Wed Mar 28 2018(Updated: )
Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerabilities are due to the affected software improperly sanitizing command arguments to prevent access to internal data structures on a device. An attacker who has user EXEC mode (privilege level 1) access to an affected device could exploit these vulnerabilities on the device by executing CLI commands that contain crafted arguments. A successful exploit could allow the attacker to gain access to the underlying Linux shell of the affected device and execute arbitrary commands with root privileges on the device. Cisco Bug IDs: CSCtw85441, CSCus42252, CSCuv95370.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE Software | =15.0\(5.59\)emd | |
| Cisco IOS XE Software | =16.1\(0\) | |
| Cisco IOS XE Software | =16.2\(0\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-0176?
CVE-2018-0176 is rated as a high severity vulnerability due to its potential to allow local attackers to execute arbitrary commands with root privileges.
How do I fix CVE-2018-0176?
To mitigate CVE-2018-0176, upgrade the affected Cisco IOS XE Software to a release that addresses the vulnerabilities.
What types of devices are affected by CVE-2018-0176?
CVE-2018-0176 affects devices running specific versions of Cisco IOS XE Software, including 15.0(5.59)emd, 16.1(0), and 16.2(0).
Can CVE-2018-0176 be exploited remotely?
No, CVE-2018-0176 requires an authenticated, local attacker to exploit the vulnerability.
What are the consequences of exploiting CVE-2018-0176?
Exploiting CVE-2018-0176 could allow an attacker to access the underlying Linux shell and execute arbitrary commands on the affected device.
- agent/type
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/15.0\(5.59\)emd
- version/cisco ios xe/16.1\(0\)
- version/cisco ios xe/16.2\(0\)