CVE-2017-12230
HighSummary
A vulnerability in the web-based user interface of Cisco IOS XE 16.2 could allow an authenticated, remote attacker to elevate their privileges on an affected device. The vulnerability is due to incorrect default permission settings for new users created using the web UI.
Risk Assessment
An attacker could exploit this vulnerability to gain elevated privileges on the device, potentially leading to unauthorized access and damage to the system.
Recommendation
It is recommended to update Cisco IOS XE software to the latest version to mitigate this vulnerability and review permission settings for new users in the web interface.
Other vulnerabilities in Cisco IOS XE 16.2
See all- CVE-2016-6378High
Cisco IOS XE versions 3.1 through 3.17 and 16.1 through 16.2 are vulnerable to an attack that can cause device reload via crafted ICMP packets requiring NAT.
- CVE-2016-6386High
Cisco IOS XE versions 3.1 through 3.17 and 16.1 on 64-bit platforms allow remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets.
- CVE-2015-6282High
Cisco IOS XE 2.x and 3.x before 3.10.6S, 3.11.xS through 3.13.xS before 3.13.3S, and 3.14.xS through 3.15.xS before 3.15.1S are vulnerable to an attack that can lead to denial of service by causing device reload. Attackers can exploit IPv4 packets that require NAT and MPLS actions.
- CVE-2015-0645High
The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to cause a denial of service (device reload) via malformed IPv4 or IPv6 packets.
- CVE-2015-0644High
AppNav in Cisco IOS XE versions 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via a crafted TCP packet, aka Bug ID CSCuo53622.
- CVE-2015-0641High
Cisco IOS XE versions 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, and 3.15 before 3.15.0S are vulnerable to a denial of service attack that can cause device reload via crafted IPv6 packets. This vulnerability is known as Bug ID CSCub68073.
- CVE-2015-0639High
The Common Flow Table (CFT) feature in Cisco IOS XE versions 3.6 and 3.7 before 3.7.1S and in versions 3.8 to 3.15 before respective updates allows remote attackers to cause a denial of service (device reload) via malformed IPv6 packets with IPv4 UDP encapsulation.
Original NVD description (English source)
A vulnerability in the web-based user interface (web UI) of Cisco IOS XE 16.2 could allow an authenticated, remote attacker to elevate their privileges on an affected device. The vulnerability is due to incorrect default permission settings for new users who are created by using the web UI of the affected software. An attacker could exploit this vulnerability by using the web UI of the affected software to create a new user and then logging into the web UI as the newly created user. A successful exploit could allow the attacker to elevate their privileges on the affected device. This vulnerability affects Cisco devices that are running a vulnerable release Cisco IOS XE Software, if the HTTP Server feature is enabled for the device. The newly redesigned, web-based administration UI was introduced in the Denali 16.2 Release of Cisco IOS XE Software. This vulnerability does not affect the web-based administration UI in earlier releases of Cisco IOS XE Software. Cisco Bug IDs: CSCuy83062.