CVE-2018-0087 — Improper Authentication in Cisco WEB Security Appliance

CWE-287 — Improper Authentication4 documents4 sources
Severity
5.6MEDIUMNVD
EPSS
0.3%
top 48.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco WEB Security ApplianceCisco Asyncos
Timeline
PublishedMar 8
Latest updateMay 13

Description

A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential validation. An attacker could exploit this vulnerability by using FTP to connect to the management IP address of the targeted device. A successful exploit could allow the attacker to log in to the FTP …

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:LExploitability: 2.2 | Impact: 3.4

Affected Packages2 packages

▶NVDcisco/asyncos10.5.1-296
▶CVEListV5cisco/cisco_web_security_applianceCisco Web Security Appliance

🔴Vulnerability Details

2
GHSA
GHSA-9p96-pf4v-v529: A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to log in to the FTP serve↗2022-05-13
▶
CVEList
CVE-2018-0087: A vulnerability in the FTP server of the Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to log in to the FTP serve↗2018-03-08
▶

📋Vendor Advisories

1
Cisco
Cisco Web Security Appliance FTP Authentication Bypass Vulnerability↗2018-03-07
▶
CVE-2018-0087 — Improper Authentication in Cisco | cvebase