Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2018-0221

Quick assessment

Affected
n/a Cisco Identity Services Engine
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco Identity Services Engine（ISE）是美国思科（Cisco）公司的一款基于身份的环境感知平台（ISE身份服务引擎）。该平台通过收集网络、用户和设备中的实时信息，制定并实施相应策略来监管网络。 Cisco ISE中的CLI命令存在命令注入漏洞，该漏洞源于程序没有充分对用户输入中的CLI ISE配置命令执行输入验证。本地攻击者可通过认证为管理用户，发送CLI命令并向命令参数中注入恶意的输入利用该漏洞向底层操作系统中注入命令或造成用户会话挂起或断开。

AI Predicted 7.8 Difficulty: Easy EPSS 0.82% · P57
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2018-0221

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in specific CLI commands for the Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to perform command injection to the underlying operating system or cause a hang or disconnect of the user session. The attacker needs valid administrator credentials for the device. The vulnerability is due to incomplete input validation of user input for certain CLI ISE configuration commands. An attacker could exploit this vulnerability by authenticating as an administrative user, issuing a specific CLI command, and entering crafted, malicious user input for the command parameters. An exploit could allow the attacker to perform command injection to the lower-level Linux operating system. It is also possible the attacker could cause the ISE user interface for this management session to hang or disconnect. Cisco Bug IDs: CSCvg95479.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Identity Services Engine 命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Identity Services Engine（ISE）是美国思科（Cisco）公司的一款基于身份的环境感知平台（ISE身份服务引擎）。该平台通过收集网络、用户和设备中的实时信息，制定并实施相应策略来监管网络。 Cisco ISE中的CLI命令存在命令注入漏洞，该漏洞源于程序没有充分对用户输入中的CLI ISE配置命令执行输入验证。本地攻击者可通过认证为管理用户，发送CLI命令并向命令参数中注入恶意的输入利用该漏洞向底层操作系统中注入命令或造成用户会话挂起或断开。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- Cisco Identity Services Engine Cisco Identity Services Engine -

II. Public POCs for CVE-2018-0221

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-0221

请登录查看更多情报信息。

Vendor Advisories for CVE-2018-0221 (3)

Same Patch Batch · n/a · 2018-03-08 · 47 CVEs total

CVE-2018-7871 libming 缓冲区错误漏洞
CVE-2018-7874 libming 安全漏洞
CVE-2018-7876 libming 安全漏洞
CVE-2014-7272 Simple Desktop Display Manager 权限许可和访问控制漏洞
CVE-2018-5313 Rapid Scada 安全漏洞
CVE-2018-7183 NTP ntpq 缓冲区错误漏洞
CVE-2018-7889 Calibre 安全漏洞
CVE-2018-7890 Zoho ManageEngine Applications Manager 命令注入漏洞
CVE-2014-7271 Simple Desktop Display Manager 安全漏洞
CVE-2018-7872 libming 安全漏洞
CVE-2018-7873 libming 缓冲区错误漏洞
CVE-2018-7870 libming 安全漏洞
CVE-2018-7869 libming 安全漏洞
CVE-2018-7868 libming 缓冲区错误漏洞
CVE-2018-7867 libming 缓冲区错误漏洞
CVE-2018-7866 libming 安全漏洞
CVE-2018-1220 EMC RSA Archer 安全漏洞
CVE-2018-1219 EMC RSA Archer 访问控制错误漏洞
CVE-2018-1216 多款Dell产品vApp Manager 安全漏洞
CVE-2018-1215 多款Dell产品安全漏洞

Showing top 20 of 47 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Cisco Identity Services Engine
Same vendor: n/a
Same weakness: CWE-78