CVE-2018-15439 Cisco Small Business Switches Privileged Access Vulnerability
An unauthenticated remote attacker can bypass authentication using a hidden privileged account to execute commands with full admin rights on Cisco Small Business Switches.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-15439?
CVE-2018-15439 is a critical vulnerability in Cisco Small Business 300 Series Managed Switches, published on 8 Nov 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected software enables a privileged user account without notifying administrators of the system. An attacker could exploit this vulnerability by using this account to log in to an affected device and execute commands with full admin rights. Cisco has not released software updates that address this vulnerability. This advisory will be updated with fixed software information once fixed software becomes available. There is a workaround to address this vulnerability.
Weakness: CWE-798
Which versions are affected by CVE-2018-15439?
It affects 114 products.
Products include Cisco Sf200-24 Firmware, Cisco Sf200-24fp Firmware, Cisco Sf200-24p Firmware, Cisco Sf200-48 Firmware, Cisco Sf200-48p Firmware, Cisco Sf250-24 Firmware and 108 more.
How do I fix CVE-2018-15439?
No fix has been published for CVE-2018-15439 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-15439 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-15439 exists.
Public exploit code: 1 Metasploit module.
Other vulnerabilities in Cisco Small Business 300 Series Managed Switches
- CVE-2020-3363 Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability
- CVE-2020-3297 Cisco Small Business Smart and Managed Switches Session Management Vulnerability
- CVE-2019-12636 Cisco Small Business Smart and Managed Switches Cross-Site Request Forgery Vulnerability
- CVE-2019-15993 Cisco Small Business Switches Information Disclosure Vulnerability
- CVE-2019-1859 Cisco Small Business Switches Secure Shell Certificate Authentication Bypass Vulnerability
Sources
Also known as GHSA-3f6c-mv48-pf3v.