Auth bypass in Cisco 5100_enterprise_network_compute_system
CVE-2018-0362
A vulnerability in BIOS authentication management of Cisco 5000 Series Enterprise Network Compute System and Cisco Unified Computing (UCS) E-Series Servers could allow an unauthenticated, local attacker to bypass the BIOS authentication an…
Vulnerability class: Broken Authentication
EPSS: 0.004 (30.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
Affected products
- Cisco 5100_enterprise_network_compute_system
- Cisco 5100_enterprise_network_compute_system_firmware — versions 3.2\(3\)
- Cisco 5400_enterprise_network_compute_system
- Cisco 5400_enterprise_network_compute_system_firmware — versions 3.2\(3\)
- Cisco Ucs-e1120d-k9
- Cisco Ucs-e1120d-k9_firmware — versions 3.2\(3\)
- Cisco Ucs-e1120d-m3
- Cisco Ucs-e1120d-m3_firmware — versions 3.2\(3\)
- Cisco Ucs-e140d-k9
- Cisco Ucs-e140d-k9_firmware — versions 3.2\(3\)
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2018-0362?
- CVE-2018-0362 is a medium-severity vulnerability in Cisco 5100_enterprise_network_compute_system, classified under Improper Authentication. CVSS score: 4.3/10. Published 2018-06-21.
- How severe is CVE-2018-0362?
- Medium severity. CVSS v3 base score is 4.3 out of 10.