CVE-2018-0341
Severity Score
8.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A vulnerability in the web-based UI of Cisco IP Phone 6800, 7800, and 8800 Series with Multiplatform Firmware before 11.2(1) could allow an authenticated, remote attacker to perform a command injection and execute commands with the privileges of the web server. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including arbitrary shell commands in a specific user input field. Cisco Bug IDs: CSCvi51426.
Una vulnerabilidad en la interfaz de usuario web de Cisco IP Phone Series 6800, 7800 y 8800 con firmware multiplataforma en versiones anteriores a la 11.2(1) podría permitir que un atacante remoto autenticado realice una inyección de comandos y ejecute comandos con los privilegios del servidor web. Esta vulnerabilidad se debe a una validación de entradas insuficiente. Un atacante podría explotar esta vulnerabilidad incluyendo comandos shell arbitrarios en un campo de entrada de usuario específico. Cisco Bug IDs: CSCvi51426.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-11-27 CVE Reserved
- 2018-07-16 CVE Published
- 2024-08-05 CVE Updated
- 2024-09-10 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/104731 | Third Party Advisory | |
| http://www.securitytracker.com/id/1041285 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Ip Phone Multiplatform Firmware Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" | 11.1\(2\) Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" and version "11.1\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ip Phone 6841 Search vendor "Cisco" for product "Ip Phone 6841" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ip Phone Multiplatform Firmware Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" | 11.1\(2\) Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" and version "11.1\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ip Phone 6851 Search vendor "Cisco" for product "Ip Phone 6851" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ip Phone Multiplatform Firmware Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" | 11.1\(2\) Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" and version "11.1\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ip Phone 7811 Search vendor "Cisco" for product "Ip Phone 7811" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ip Phone Multiplatform Firmware Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" | 11.1\(2\) Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" and version "11.1\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ip Phone 7821 Search vendor "Cisco" for product "Ip Phone 7821" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ip Phone Multiplatform Firmware Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" | 11.1\(2\) Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" and version "11.1\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ip Phone 7841 Search vendor "Cisco" for product "Ip Phone 7841" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ip Phone Multiplatform Firmware Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" | 11.1\(2\) Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" and version "11.1\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ip Phone 7861 Search vendor "Cisco" for product "Ip Phone 7861" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ip Phone Multiplatform Firmware Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" | 11.1\(2\) Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" and version "11.1\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ip Phone 8811 Search vendor "Cisco" for product "Ip Phone 8811" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ip Phone Multiplatform Firmware Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" | 11.1\(2\) Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" and version "11.1\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ip Phone 8841 Search vendor "Cisco" for product "Ip Phone 8841" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ip Phone Multiplatform Firmware Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" | 11.1\(2\) Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" and version "11.1\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ip Phone 8845 Search vendor "Cisco" for product "Ip Phone 8845" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ip Phone Multiplatform Firmware Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" | 11.1\(2\) Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" and version "11.1\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ip Phone 8851 Search vendor "Cisco" for product "Ip Phone 8851" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ip Phone Multiplatform Firmware Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" | 11.1\(2\) Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" and version "11.1\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ip Phone 8861 Search vendor "Cisco" for product "Ip Phone 8861" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ip Phone Multiplatform Firmware Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" | 11.1\(2\) Search vendor "Cisco" for product "Ip Phone Multiplatform Firmware" and version "11.1\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | Ip Phone 8865 Search vendor "Cisco" for product "Ip Phone 8865" | - | - |
Safe
|