CVE-2018-0417 Cisco Wireless LAN Controller Software GUI Privilege Escalation Vulnerability

High 7.5 Published 17 Oct 2018 Updated 26 Nov 2024

An authenticated local attacker can escalate privileges to create admin accounts via TACACS GUI parsing flaws in Cisco WLC.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2018-0417?

CVE-2018-0417 is a high-severity vulnerability in Cisco Wireless Lan Controller Software, published on 17 Oct 2018. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability in TACACS authentication with Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to perform certain operations within the GUI that are not normally available to that user on the CLI. The vulnerability is due to incorrect parsing of a specific TACACS attribute received in the TACACS response from the remote TACACS server. An attacker could exploit this vulnerability by authenticating via TACACS to the GUI on the affected device. A successful exploit could allow an attacker to create local user accounts with administrative privileges on an affected WLC and execute other commands that are not allowed from the CLI and should be prohibited.

Weakness: CWE-264

Which versions are affected by CVE-2018-0417?

It affects 2 products.

Products include Cisco Wireless Lan Controller, Cisco Wireless Lan Controller Software.

How do I fix CVE-2018-0417?

No fix has been published for CVE-2018-0417 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-0417 being exploited?

There is no known exploitation of CVE-2018-0417 in the wild and no public exploit code.

All Cisco Wireless Lan Controller Software vulnerabilities

Sources

Also known as GHSA-ghg7-vhxc-mhv7.