Cisco Web Security Appliance におけるセキュリティ機能に関する脆弱性
| Title |
Cisco Web Security Appliance におけるセキュリティ機能に関する脆弱性
|
| Summary |
Cisco Web Security Appliance (WSA) には、セキュリティ機能に関する脆弱性が存在します。 ベンダは、本脆弱性を Bug ID CSCvg78875 として公開しています。
|
| Possible impacts |
情報を取得される可能性があります。 |
| Solution |
ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date |
June 6, 2018, midnight |
| Registration Date |
Aug. 7, 2018, 5:40 p.m. |
| Last Update |
Aug. 7, 2018, 5:40 p.m. |
|
CVSS3.0 : 重要
|
| Score |
7.5
|
| Vector |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
|
CVSS2.0 : 警告
|
| Score |
5
|
| Vector |
AV:N/AC:L/Au:N/C:P/I:N/A:N |
Affected System
| シスコシステムズ |
|
Cisco Web セキュリティ アプライアンス
|
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
| No |
Changed Details |
Date of change |
| 1 |
[2018年08月07日]
掲載 |
Aug. 7, 2018, 5:40 p.m. |
NVD Vulnerability Information
CVE-2018-0353
| Summary |
A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to circumvent Layer 4 Traffic Monitor (L4TM) functionality and bypass security protections. The vulnerability is due to a change in the underlying operating system software that is responsible for monitoring affected traffic. An attacker could exploit this vulnerability by sending crafted IP packets to an affected device. A successful exploit could allow the attacker to pass traffic through the device, which the WSA was configured to deny. This vulnerability affects both IPv4 and IPv6 traffic. This vulnerability affects Cisco AsyncOS versions for WSA on both virtual and hardware appliances running any release of the 10.5.1, 10.5.2, or 11.0.0 WSA Software. The WSA is vulnerable if it is configured for L4TM. Cisco Bug IDs: CSCvg78875.
|
| Publication Date |
June 7, 2018, 9:29 p.m. |
| Registration Date |
March 1, 2021, 6:36 p.m. |
| Last Update |
Nov. 21, 2024, 12:38 p.m. |
Affected software configurations
| Configuration1 |
or higher |
or less |
more than |
less than |
| cpe:2.3:a:cisco:web_security_appliance:11.0.0:*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:cisco:web_security_appliance:11.5.0-fcs-442:*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:cisco:web_security_appliance:10.5.1-296:*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:cisco:web_security_appliance:10.5.1:*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:cisco:web_security_appliance:10.5.2:*:*:*:*:*:*:* |
|
|
|
|
Related information, measures and tools
Common Vulnerabilities List