Authentication bypass in Cisco Policy Suite Diameter Routing Agent

1) Improper authentication

EUVDB-ID: #VU16902

Risk: Low

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2018-0181

CWE-ID: CWE-287 - Improper Authentication

Exploit availability: No

Description

The vulnerability allows a remote attacker to bypass authentication.

The vulnerability exists in the Redis implementation due to improper authentication when accessing the Redis server. A remote attacker can modify key-value pairs stored within the Redis server database and reduce the efficiency of the software.

Mitigation

A mitigation for Cisco Policy Suite Diameter Routing Agent software exists that reduces the attack surface by blocking access to external facing interfaces. This procedure requires a number of steps to complete

Vulnerable software versions

Policy Suite Diameter Routing Agent: 13.0.0

CPE2.3

• cpe:2.3:a:cisco_systems:policy_suite_diameter_routing_agent:13.0.0:*:*:*:*:*:*:*

External links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190109-cps-redis

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.