CVE-2018-0346
published 2018-07-18CVE-2018-0346: A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of…
PriorityP343high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
2.01%
78.7th percentile
A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to the Zero Touch Provisioning service of the affected software. An attacker could exploit this vulnerability by sending malicious packets to the affected software for processing. When the software processes the packets, a buffer overflow condition could occur and cause an affected device to reload. A successful exploit could allow the attacker to cause a temporary DoS condition while the device reloads. This vulnerability can be exploited only by traffic that is destined for an affected device. It cannot be exploited by traffic that is transiting a device. This vulnerability affects the following Cisco products if they are running a release of the Cisco SD-WAN Solution prior to Release 18.3.0: vBond Orchestrator Software, vManage Network Management Software, vSmart Controller Software. Cisco Bug IDs: CSCvi69914.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | sd-wan_solution_zero_touch_provisioning | — | — |
| cisco | vedge-1000_firmware | < 18.3.0 | 18.3.0 |
| cisco | vedge-100_firmware | < 18.3.0 | 18.3.0 |
| cisco | vedge-2000_firmware | < 18.3.0 | 18.3.0 |
| cisco | vedge-5000_firmware | < 18.3.0 | 18.3.0 |
| cisco | vedge_100b_firmware | < 18.3.0 | 18.3.0 |
| cisco | vedge_100m_firmware | < 18.3.0 | 18.3.0 |
| cisco | vedge_100wm_firmware | < 18.3.0 | 18.3.0 |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco SD-WAN Solution Zero Touch Provisioning Denial of Service Vulnerability
vendor_cisco·2018-07-18·CVSS 7.5
CVE-2018-0346 [HIGH] CWE-119 Cisco SD-WAN Solution Zero Touch Provisioning Denial of Service Vulnerability
Cisco SD-WAN Solution Zero Touch Provisioning Denial of Service Vulnerability
A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to the Zero Touch Provisioning service of the affected software. An attacker could exploit this vulnerability by sending malicious packets to the affected software for processing. When the software processes the packets, a buffer overflow condition could occur and cause an affected device to reload. A successful exploit could allow the attacker to cause a temporary DoS condition while the device reloads.
This vulnerabilit
Cisco
Cisco SD-WAN Solution Zero Touch Provisioning Denial of Service Vulnerability
vendor_cisco·CVSS 3.0
CVE-2018-0346 Cisco SD-WAN Solution Zero Touch Provisioning Denial of Service Vulnerability
CVE-2018-0346: Cisco SD-WAN Solution Zero Touch Provisioning Denial of Service Vulnerability
A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to the Zero Touch Provisioning service of the affected software. An attacker could exploit this vulnerability by sending malicious packets to the affected software for processing. When the software processes the packets, a buffer overflow condition could occur and cause an affected device to reload. A successful exploit could allow the attacker to cause a temporary DoS condition while the device reloads. Thi
GHSA
GHSA-mgv5-gwhp-72c8: A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial
ghsa_unreviewed·2022-05-13
CVE-2018-0346 [HIGH] CWE-119 GHSA-mgv5-gwhp-72c8: A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial
A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to the Zero Touch Provisioning service of the affected software. An attacker could exploit this vulnerability by sending malicious packets to the affected software for processing. When the software processes the packets, a buffer overflow condition could occur and cause an affected device to reload. A successful exploit could allow the attacker to cause a temporary DoS condition while the device reloads. This vulnerability can be exploited only by traffic that is destined for an affected device. It
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2018-07-18
Published