CVE-2018-0300: Path Traversal
First published: Thu Jun 21 2018(Updated: )
A vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote attacker using path traversal techniques to create or overwrite arbitrary files on an affected device. The vulnerability is due to insufficient validation during the application image upload process. An attacker could exploit this vulnerability by creating an application image containing malicious code and installing the image on the affected device using the CLI or web-based user interface (web UI). These actions occur prior to signature verification and could allow the attacker to create and execute arbitrary code with root privileges. Note: A missing or invalid signature in the application image will cause the upload process to fail, but does not prevent the exploit. Cisco Bug IDs: CSCvc21901.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco FXOS | =2.0\(1.68\) | |
| Cisco Firepower 4110 | ||
| Cisco Firepower 4120 | ||
| Cisco Firepower 4140 | ||
| Cisco Firepower 4150 | ||
| Cisco Firepower 9300 Security Appliance |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-0300?
CVE-2018-0300 is a vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance.
How severe is CVE-2018-0300?
CVE-2018-0300 has a severity rating of 7.2 out of 10, which is classified as critical.
Which software is affected by CVE-2018-0300?
The vulnerability affects Cisco FXOS version 2.0(1.68) of the Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance.
How can an attacker exploit CVE-2018-0300?
An authenticated, remote attacker can exploit the vulnerability using path traversal techniques to create or overwrite arbitrary files.
Where can I find more information about CVE-2018-0300?
You can find more information about CVE-2018-0300 at the following sources: [SecurityTracker](http://www.securitytracker.com/id/1041169) and [Cisco Security Advisory](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-firepwr-pt).
- collector/nvd-index
- agent/weakness
- agent/description
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco fxos
- version/cisco fxos/2.0\(1.68\)
- canonical/cisco firepower 4110
- canonical/cisco firepower 4120
- canonical/cisco firepower 4140
- canonical/cisco firepower 4150
- canonical/cisco firepower 9300 security appliance