CVE-2018-0417 — Cisco Wireless LAN Controller vulnerability

CWE-2644 documents4 sources
Severity
7.8HIGHNVD
EPSS
0.5%
top 33.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Wireless LAN ControllerCisco Wireless LAN Controller SoftwareCisco Wireless LAN Controller
Timeline
PublishedOct 17
Latest updateMay 13

Description

A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the GUI that are not normally available to that user on the CLI. The vulnerability is due to incorrect parsing of a specific TACACS attribute received in the TACACS response from the remote TACACS server. An attacker could exploit this vulnerability by authenticating via TACACS to the GUI on the affected device. A successful …

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶NVDcisco/wireless_lan_controller8.4 — 8.5.131.0

🔴Vulnerability Details

2
GHSA
GHSA-ghg7-vhxc-mhv7: A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform cer↗2022-05-13
▶
CVEList
Cisco Wireless LAN Controller Software GUI Privilege Escalation Vulnerability↗2018-10-17
▶

📋Vendor Advisories

1
Cisco
Cisco Wireless LAN Controller Software GUI Privilege Escalation Vulnerability↗2018-10-17
▶
CVE-2018-0417 — Cisco vulnerability | cvebase