vulnwire
9.8crit

CVE-2018-15439in critical feed1 exploit

Cisco Small Business Switches Privileged Access Vulnerability

Published 8 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
49.7%
percentile 99%
Public exploits
1
Metasploit

A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected software enables a privileged user account without notifying administrators of the system. An attacker could exploit this vulnerability by using this account to log in to an affected device and execute commands with full admin rights. Cisco has not released software updates that address this vulnerability. This advisory will be updated with fixed software information once fixed software becomes available. There is a workaround to address this vulnerability.

CISA SSVC assessment

Exploitation
none
Automatable
yes
Technical impact
total
Assessed
23 mo ago

Exploit prediction (EPSS)

49.74% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

CVSS scores

Assigned byVersionScoreVector
CNA3.09.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CNA3.09.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

  • Cisco Cisco Small Business 300 Series Managed Switches

Classification

Weakness
  • CWE-798 Use of Hard-coded Credentials

References

  • securityfocus.com /bid/105873 · vdb-entry, x_refsource_BID, x_transferred
  • tools.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-sbsw-privacc · vendor-advisory, x_refsource_CISCO, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.