Vulnerability in Cisco Asyncos
CVE-2018-0095
A vulnerability in the administrative shell of Cisco AsyncOS on Cisco Email Security Appliance (ESA) and Content Security Management Appliance (SMA) could allow an authenticated, local attacker to escalate their privilege level and gain ro…
EPSS: 0.004 (32.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Cisco Asyncos — versions 9.1.1-005, 9.7.2-065
- N/a Cisco Email Security And Content Management Appliance — versions Cisco Email Security and Content Security Management Appliance
Weakness classification (CWE)
References
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-0095?
- CVE-2018-0095 is a high-severity vulnerability in Cisco Asyncos, classified under CWE-264. CVSS score: 7.8/10. Published 2018-01-18.
- How severe is CVE-2018-0095?
- High severity. CVSS v3 base score is 7.8 out of 10.