CVE-2018-0300
Severity
7.2HIGH
EPSS
1.8%
top 17.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 21
Latest updateMay 13
Description
A vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower 9300 Security Appliance could allow an authenticated, remote attacker using path traversal techniques to create or overwrite arbitrary files on an affected device. The vulnerability is due to insufficient validation during the application image upload process. An attacker could exploit this vulnerability by creating an application image…
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9
Affected Packages2 packages
▶CVEListV5cisco_firepower_4100_series_next-generation_firewall_and_firepower_9300_security_appliance_unknownCisco Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance unknown
🔴Vulnerability Details
2GHSA▶
GHSA-ch88-fg86-h47v: A vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) an↗2022-05-13
CVEList▶
CVE-2018-0300: A vulnerability in the process of uploading new application images to Cisco FXOS on the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) an↗2018-06-21
📋Vendor Advisories
1Cisco▶
Cisco Firepower 4100 Series Next-Generation Firewall and Firepower 9300 Security Appliance Path Traversal Vulnerability↗2018-06-20