CVE-2018-0346 Memory corruption in Cisco SD-WAN Solution unknown

High 7.5 Published 18 Jul 2018 Updated 29 Nov 2024

Unauthenticated remote attackers can cause a denial of service on Cisco SD-WAN devices by sending malicious packets that trigger a buffer overflow.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-0346?

CVE-2018-0346 is a high-severity memory corruption vulnerability in Cisco SD-WAN Solution unknown, published on 18 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect bounds checks for certain values in packets that are sent to the Zero Touch Provisioning service of the affected software. An attacker could exploit this vulnerability by sending malicious packets to the affected software for processing. When the software processes the packets, a buffer overflow condition could occur and cause an affected device to reload. A successful exploit could allow the attacker to cause a temporary DoS condition while the device reloads. This vulnerability can be exploited only by traffic that is destined for an affected device. It cannot be exploited by traffic that is transiting a device. This vulnerability affects the following Cisco products if they are running a release of the Cisco SD-WAN Solution prior to Release 18.3.0: vBond Orchestrator Software, vManage Network Management Software, vSmart Controller Software. Cisco Bug IDs: CSCvi69914.

Weakness: CWE-119

Which versions are affected by CVE-2018-0346?

It affects 12 products.

Products include Cisco Vbond Orchestrator, Cisco Vedge-1000 Firmware, Cisco Vedge-100 Firmware, Cisco Vedge-2000 Firmware, Cisco Vedge-5000 Firmware, Cisco Vedge-Plus and 6 more.

How do I fix CVE-2018-0346?

No fix has been published for CVE-2018-0346 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2018-0346 being exploited?

There is no known exploitation of CVE-2018-0346 in the wild and no public exploit code.

Sources

Also known as GHSA-mgv5-gwhp-72c8.