Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2018-0352

Quick assessment

Affected

n/a Cisco Wide Area Application Services unknown

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco Wide Area Application Services（WAAS）Software是美国思科（Cisco）公司的一套广域网链路加速软件。Disk Check Tool（disk-check.sh）是其中的一个磁盘检查工具。 Cisco WAAS Software中的Disk Check Tool(disk-check.sh)中存在提权漏洞，该漏洞源于程序没有充分的验证在Disk Check Tool上下文中运行的脚本文件。本地攻击者可通过在该受影响工具运行时，用恶意的脚本文件替换掉其中的

AI Predicted 7.8 Difficulty: Easy EPSS 0.38% · P33 Updated Feb 21, 2026

Possible ATT&CK Techniques 3 AI

T1204 · User Execution T1575 T1531.001

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2018-0352

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to elevate their privilege level to root. The attacker must have valid user credentials with super user privileges (level 15) to log in to the device. The vulnerability is due to insufficient validation of script files executed in the context of the Disk Check Tool. An attacker could exploit this vulnerability by replacing one script file with a malicious script file while the affected tool is running. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device. Cisco Bug IDs: CSCvi72673.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

权限、特权和访问控制

Source: CVE Program / CVE List V5

Vulnerability Title

Cisco Wide Area Application Services Software Disk Check Tool 权限许可和访问控制漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	Cisco Wide Area Application Services unknown	Cisco Wide Area Application Services unknown	-

II. Public POCs for CVE-2018-0352

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2018-0352

请登录查看更多情报信息。

Vendor Advisories for CVE-2018-0352 (3)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-waas-priv-escalation x_refsource_CONFIRM
http://www.securityfocus.com/bid/104464 vdb-entry x_refsource_BID
http://www.securitytracker.com/id/1041077 vdb-entry x_refsource_SECTRACK

https://www.cve.org/CVERecord?id=CVE-2018-0352

Same Patch Batch · n/a · 2018-06-07 · 39 CVEs total

CVE-2018-0335		Cisco Prime Collaboration Provisioning 信息泄露漏洞
CVE-2018-12036		OWASP Dependency-Check 路径遍历漏洞
CVE-2018-12039		joyplus-cms 安全漏洞
CVE-2018-12042		Roxy Fileman 路径遍历漏洞
CVE-2018-12043		Symphony 跨站脚本漏洞
CVE-2018-0149		Cisco Integrated Management Controller Supervisor Software和UCS Director Software 跨站脚本漏洞
CVE-2018-0329		Cisco Wide Area Application Services Software 信任管理问题漏洞
CVE-2018-0332		Cisco Unified IP Phone软件资源管理错误漏洞
CVE-2018-0333		Cisco FireSIGHT System Software 安全特征问题漏洞
CVE-2018-0334		Cisco AnyConnect Network Access Manager和AnyConnect Secure Mobility Client 安全特征问题漏洞
CVE-2018-12031		Eaton Intelligent Power Manager 安全漏洞
CVE-2018-0336		Cisco Prime Collaboration Provisioning 权限许可和访问控制漏洞
CVE-2018-0338		Cisco Unified Computing System Software 输入验证错误漏洞
CVE-2018-0339		Cisco Identity Services Engine 跨站脚本漏洞
CVE-2018-0340		Cisco Unified Communications Manager 跨站脚本漏洞
CVE-2018-0354		Cisco Unity Connection 跨站脚本漏洞
CVE-2018-0355		Cisco Unified Communications Manager 输入验证错误漏洞
CVE-2018-0356		Cisco WebEx 跨站脚本漏洞
CVE-2018-0357		Cisco WebEx 跨站脚本漏洞
CVE-2018-0317		Cisco Prime Collaboration Provisioning 权限许可和访问控制漏洞

Showing top 20 of 39 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Cisco Wide Area Application Services unknown

CVE-2018-0329
Cisco Wide Area Application Services Software 信任管理问题漏洞

Same vendor: n/a

Same weakness: CWE-264