CVE-2018-0213 Privilege escalation in Cisco Identity Services Engine

High 8.8 Published 8 Mar 2018 Updated 2 Dec 2024

An authenticated remote attacker can exploit improper input validation in Cisco ISE credential reset to gain elevated privileges.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-0213?

CVE-2018-0213 is a high-severity vulnerability in Cisco Identity Services Engine, published on 8 Mar 2018. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability in the credential reset functionality for Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation. An attacker could exploit this vulnerability by authenticating to the device and sending a crafted HTTP request. A successful exploit could allow the attacker to gain elevated privileges to access functionality that should be restricted. The attacker must have valid user credentials to the device to exploit this vulnerability. Cisco Bug IDs: CSCvf69753.

Weakness: CWE-20, CWE-264

Which versions are affected by CVE-2018-0213?

It affects 1 product.

Products include Cisco Identity Services Engine.

How do I fix CVE-2018-0213?

No fix has been published for CVE-2018-0213 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-0213 being exploited?

There is no known exploitation of CVE-2018-0213 in the wild and no public exploit code.

All Cisco Identity Services Engine vulnerabilities

Sources

Also known as GHSA-9h7m-4723-xw5h.