CVE-2018-0459: Cisco Enterprise NFV Infrastructure Software Denial of Service Vulnerability
A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to cause an affected system to reboot or shut down. The vulnerability is due to insufficient server-side authorization checks. An attacker who is logged in to the web-based management interface as a low-privileged user could exploit this vulnerability by sending a crafted HTTP request. A successful exploit could allow the attacker to use the low-privileged user account to reboot or shut down the affected system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0459?
CVE-2018-0459 has been assigned a high severity rating due to the potential for an authenticated attacker to reboot or shut down affected systems.
How do I fix CVE-2018-0459?
To mitigate CVE-2018-0459, ensure to apply the latest patches or updates provided by Cisco for the NFV Infrastructure Software.
Who is affected by CVE-2018-0459?
Organizations using Cisco Enterprise Network Functions Virtualization Infrastructure Software are at risk due to CVE-2018-0459.
What versions of Cisco software are affected by CVE-2018-0459?
CVE-2018-0459 affects all versions of Cisco Enterprise Network Functions Virtualization Infrastructure Software prior to the release of the security patches.
Is CVE-2018-0459 a critical vulnerability?
CVE-2018-0459 is considered a critical vulnerability since it allows for significant impact on system availability.