What is the CVSS score of CVE-2018-15439?

CVE-2018-15439 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 49.7%.

Is there a public PoC exploit available for CVE-2018-15439?

Yes, a public proof-of-concept exploit is available for CVE-2018-15439. Prioritise patching immediately. EPSS: 49.7%.

Sg200 50 Firmware CVE-2018-15439

CRITICAL

Use of Hard-coded Credentials (CWE-798)

2018-11-08 psirt@cisco.com

Authentication Bypass Cisco Sg200 50 Firmware Sg200 50P Firmware Sg200 50Fp Firmware Sg200 26 Firmware Sg200 26P Firmware Sg200 26Fp Firmware Sg200 18 Firmware Sg200 10Fp Firmware Sg200 08 Firmware Sg200 08P Firmware Sf200 24 Firmware Sf200 24P Firmware Sf200 24Fp Firmware Sf200 48 Firmware Sf200 48P Firmware Sf302 08Pp Firmware Sf302 08Mpp Firmware Sg300 10Pp Firmware Sg300 10Mpp Firmware Sf300 24Pp Firmware Sf300 48Pp Firmware Sg300 28Pp Firmware Sf300 08 Firmware Sf300 48P Firmware Sg300 10Mp Firmware Sg300 10P Firmware Sg300 10 Firmware Sg300 28P Firmware Sf300 24P Firmware Sf302 08Mp Firmware Sg300 28 Firmware Sf300 48 Firmware Sg300 20 Firmware Sf302 08P Firmware Sg300 52 Firmware Sf300 24 Firmware Sf302 08 Firmware Sf300 24Mp Firmware Sg300 10Sfp Firmware Sg300 28Mp Firmware Sg300 52P Firmware Sg300 52Mp Firmware Sg500 28Mpp Firmware Sg500 52Mp Firmware Sg500Xg 8F8T Firmware Sf500 24 Firmware Sf500 24P Firmware Sf500 48 Firmware Sf500 48P Firmware Sg500 28 Firmware Sg500 28P Firmware Sg500 52 Firmware Sg500 52P Firmware Sg500X 24 Firmware Sg500X 24P Firmware Sg500X 48 Firmware Sg500X 48P Firmware Sg250X 24 Firmware Sg250X 24P Firmware Sg250X 48 Firmware Sg250X 48P Firmware Sg250 08 Firmware Sg250 08Hp Firmware Sg250 10P Firmware Sg250 18 Firmware Sg250 26 Firmware Sg250 26Hp Firmware Sg250 26P Firmware Sg250 50 Firmware Sg250 50Hp Firmware Sg250 50P Firmware Sf250 24 Firmware Sf250 24P Firmware Sf250 48 Firmware Sf250 48Hp Firmware Sg350 10 Firmware Sg350 10P Firmware Sg350 10Mp Firmware Sg355 10P Firmware Sg350 28 Firmware Sg350 28P Firmware Sg350 28Mp Firmware Sf350 48 Firmware Sf350 48P Firmware Sf350 48Mp Firmware Sg350Xg 2F10 Firmware Sg350Xg 24F Firmware Sg350Xg 24T Firmware Sg350Xg 48T Firmware Sg350X 24 Firmware Sg350X 24P Firmware Sg350X 24Mp Firmware Sg350X 48 Firmware Sg350X 48P Firmware Sg350X 48Mp Firmware Sx550X 16Ft Firmware Sx550X 24Ft Firmware Sx550X 12F Firmware Sx550X 24F Firmware Sx550X 24 Firmware Sx550X 52 Firmware Sg550X 24 Firmware Sg550X 24P Firmware Sg550X 24Mp Firmware Sg550X 24Mpp Firmware Sg550X 48 Firmware Sg550X 48P Firmware Sg550X 48Mp Firmware Sf550X 24 Firmware Sf550X 24P Firmware Sf550X 24Mp Firmware Sf550X 48 Firmware Sf550X 48P Firmware Sf550X 48Mp Firmware

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Nov 08, 2018 - 17:29 nvd

CRITICAL 9.8

DescriptionNVD

A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected software enables a privileged user account without notifying administrators of the system. An attacker could exploit this vulnerability by using this account to log in to an affected device and execute commands with full admin rights. Cisco has not released software updates that address this vulnerability. This advisory will be updated with fixed software information once fixed software becomes available. There is a workaround to address this vulnerability.

AnalysisAI

A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Use of Hard-coded Credentials (CWE-798), which allows attackers to gain access using credentials embedded in source code. A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected software enables a privileged user account without notifying administrators of the system. An attacker could exploit this vulnerability by using this account to log in to an affected device and execute commands with full admin rights. Cisco has not released software updates that address this vulnerability. This advisory will be updated with fixed software information once fixed software becomes available. There is a workaround to address this vulnerability. Affected products include: Cisco Sg200-50 Firmware, Cisco Sg200-50P Firmware, Cisco Sg200-50Fp Firmware, Cisco Sg200-26 Firmware, Cisco Sg200-26P Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Remove hard-coded credentials, use environment variables or secrets management, rotate exposed credentials immediately.