CVE-2018-0394

CVE-2018-0394

Vendor N/A
Product Cisco Cloud Services Platform 2100 unknown
Weakness CWE-20 · Input validation
Published July 18, 2018
Last update November 29, 2024

CVSS base score

What the vulnerability does

01Description

A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to obtain restricted shell access on an affected system. The vulnerability is due to insufficient input validation of parameters passed to a specific function within the user interface. An attacker could exploit this vulnerability by injecting code into a function parameter. Cisco Bug IDs: CSCvi12935.

Key dates

02Disclosure timeline

July 18, 2018 CVE published
November 29, 2024 Record updated