CVE-2018-0245: Infoleak
First published: Wed May 02 2018(Updated: )
A vulnerability in the REST API of Cisco 5500 and 8500 Series Wireless LAN Controller (WLC) Software could allow an unauthenticated, remote attacker to view system information that under normal circumstances should be prohibited. The vulnerability is due to incomplete input and validation checking mechanisms in the REST API URL request. An attacker could exploit this vulnerability by sending a malicious URL to the REST API. If successful, an exploit could allow the attacker to view sensitive system information. Cisco Bug IDs: CSCvg89442.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Wireless LAN Controller Software | =8.3\(133.0\) | |
| Cisco Wireless LAN Controller Software | =8.5\(105.0\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability description for CVE-2018-0245?
The vulnerability allows an unauthenticated, remote attacker to view system information that should be prohibited.
What is the affected software for CVE-2018-0245?
Cisco 5500 and 8500 Series Wireless LAN Controller (WLC) Software version 8.3(133.0) and 8.5(105.0) are affected.
What is the severity rating for CVE-2018-0245?
The severity rating is medium with a CVSS score of 5.3.
How can an attacker exploit CVE-2018-0245?
An attacker can exploit the vulnerability by sending a crafted API request to the affected system.
Is there a fix available for CVE-2018-0245?
Yes, Cisco has released a security advisory with recommended patches to address the vulnerability.
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco wireless lan controller software
- version/cisco wireless lan controller software/8.3\(133.0\)
- version/cisco wireless lan controller software/8.5\(105.0\)