SB2018081607 - Multiple vulnerabilities in Cisco Web Security Appliance

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018081607

SB2018081607 - Multiple vulnerabilities in Cisco Web Security Appliance

Published: August 16, 2018

Security Bulletin ID SB2018081607
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 50% Low 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Privilege escalation (CVE-ID: CVE-2018-0428)

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The vulnerability exists in the account management subsystem of Cisco Web Security Appliance (WSA) due to improper implementation of access controls. A local attacker can authenticate to the device, escape the CLI subshell and execute system-level commands on the underlying operating system as root.


2) Resource exhaustion (CVE-ID: CVE-2018-0410)

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The vulnerability exists in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances due to improper management of memory resources for TCP connections. A remote attacker can establish a high number of TCP connections to the data interface of an affected device via IPv4 or IPv6, exhaust system memory and cause the system to stop processing new connections.


Remediation

Install update from vendor's website.

References