CVE-2018-0463 Cisco Network Services Orchestrator Network Plug and Play Information Disclosure Vulnerability
Unauthenticated remote attackers can bypass SUDI authentication to access sensitive configuration data on Cisco NSO systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-0463?
CVE-2018-0463 is a high-severity authentication bypass vulnerability in Cisco Network Services Orchestrator, published on 5 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the Cisco Network Plug and Play server component of Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to gain unauthorized access to configuration data that is stored on an affected NSO system. The vulnerability exists because the Network Plug and Play component performs incomplete validation when configured to use secure unique device identifiers (SUDI) for authentication. An attacker who controls a Cisco device that supports SUDI authentication and has connectivity to an affected NSO system could exploit this vulnerability. The attacker would need to leverage information about the devices that are being registered on the NSO server to send crafted Cisco Network Plug and Play authentication packets to an affected system. A successful exploit could allow the attacker to gain unauthorized access to configuration data for devices that will be managed by the NSO system.
Weakness: CWE-264
Which versions are affected by CVE-2018-0463?
It affects 1 product.
Products include Cisco Network Services Orchestrator.
How do I fix CVE-2018-0463?
No fix has been published for CVE-2018-0463 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2018-0463 being exploited?
There is no known exploitation of CVE-2018-0463 in the wild and no public exploit code.
Other vulnerabilities in Cisco Network Services Orchestrator
- CVE-2018-0274 Command injection in Cisco Network Services Orchestrator unknown
- CVE-2024-20366 Privilege escalation in Cisco Network Services Orchestrator
- CVE-2023-20040 Path traversal in Cisco Network Services Orchestrator
- CVE-2021-1132 Cisco Network Services Orchestrator Path Traversal Vulnerability
- CVE-2024-20369 Open redirect in Cisco Network Services Orchestrator
Sources
Also known as GHSA-q65f-gxh5-gqxg.