Cisco Prime Data Center Network Manager Prime File Upload unrestricted upload

Summaryinfo

A vulnerability, which was classified as critical, has been found in Cisco Prime Data Center Network Manager and Cisco Prime Infrastructure. Affected by this vulnerability is an unknown functionality of the component Prime File Upload. The manipulation leads to unrestricted upload. This vulnerability is listed as CVE-2018-0258. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability was found in Cisco Prime Data Center Network Manager and Cisco Prime Infrastructure (Network Management Software) (affected version unknown) and classified as critical. This issue affects an unknown functionality of the component Prime File Upload. The manipulation with an unknown input leads to a unrestricted upload vulnerability. Using CWE to declare the problem leads to CWE-434. The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary files to any directory of a vulnerable device (aka Path Traversal) and execute those files. This vulnerability affects the following products: Cisco Prime Data Center Network Manager (DCNM) Version 10.0 and later, and Cisco Prime Infrastructure (PI) All versions. Cisco Bug IDs: CSCvf32411, CSCvf81727.

The weakness was presented 05/02/2018 as cisco-sa-20180502-prime-upload as confirmed advisory (Website). The advisory is shared at tools.cisco.com. The identification of this vulnerability is CVE-2018-0258 since 11/27/2017. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 05/03/2018). MITRE ATT&CK project uses the attack technique T1608.002 for this issue.

The vulnerability scanner Nessus provides a plugin with the ID 110518 (Cisco Prime Data Center Network Manager File Upload RCE (cisco-sa-20180502-prime-upload)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family CISCO.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Tenable (110518) and SecurityFocus (BID 104074†). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Network Management Software

Vendor

• Cisco

Name

• Cisco Prime Infrastructure
• Prime Data Center Network Manager

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion