CVE-2018-0302: Buffer Overflow
First published: Thu Jun 21 2018(Updated: )
A vulnerability in the CLI parser of Cisco FXOS Software and Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to cause a buffer overflow on an affected device. The vulnerability is due to incorrect input validation in the CLI parser subsystem. An attacker could exploit this vulnerability by exceeding the expected length of user input. A successful exploit could allow the attacker to execute arbitrary code with root privileges on the affected system. This vulnerability affects Firepower 4100 Series Next-Generation Firewall, Firepower 9300 Security Appliance, UCS 6100 Series Fabric Interconnects, UCS 6200 Series Fabric Interconnects, UCS 6300 Series Fabric Interconnects. Cisco Bug IDs: CSCvb61099, CSCvb86743.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Nx-os | =3.1\(1k\)a | |
| Cisco Ucs 6120xp | ||
| Cisco Ucs 6140xp | ||
| Cisco Ucs 6248up | ||
| Cisco Ucs 6296up | ||
| Cisco Ucs 6324 | ||
| Cisco Ucs 6332 | ||
| Cisco Firepower Extensible Operating System | >=1.1<1.1.4.169 | |
| Cisco Firepower Extensible Operating System | >=2.0<2.0.1.135 | |
| Cisco Firepower 4110 | ||
| Cisco Firepower 4120 | ||
| Cisco Firepower 4140 | ||
| Cisco Firepower 4150 | ||
| Cisco Firepower 9300 Security Appliance |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this Cisco vulnerability?
The vulnerability ID is CVE-2018-0302.
What is the severity level of CVE-2018-0302?
The severity level of CVE-2018-0302 is high with a value of 7.8.
Which software is affected by CVE-2018-0302?
Cisco FXOS Software and Cisco UCS Fabric Interconnect Software are affected by CVE-2018-0302.
How does CVE-2018-0302 impact the affected devices?
CVE-2018-0302 allows an authenticated, local attacker to cause a buffer overflow on the affected devices.
How can I fix CVE-2018-0302?
To fix CVE-2018-0302, apply the relevant patch or upgrade to a fixed version provided by Cisco.
- collector/nvd-index
- agent/description
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco nx-os
- version/cisco nx-os/3.1\(1k\)a
- canonical/cisco ucs 6120xp
- canonical/cisco ucs 6140xp
- canonical/cisco ucs 6248up
- canonical/cisco ucs 6296up
- canonical/cisco ucs 6324
- canonical/cisco ucs 6332
- canonical/cisco firepower extensible operating system
- version/cisco firepower extensible operating system/1.1
- version/cisco firepower extensible operating system/2.0
- canonical/cisco firepower 4110
- canonical/cisco firepower 4120
- canonical/cisco firepower 4140
- canonical/cisco firepower 4150
- canonical/cisco firepower 9300 security appliance