CVE-2018-0377 (CNNVD-201807-1296)
中文标题:
Cisco Policy Suite 安全漏洞
英文标题:
A vulnerability in the Open Systems Gateway initiative (OSGi) interface of Cisco Policy Suite before...
漏洞描述
中文描述:
Cisco Policy Suite（CPS）是美国思科（Cisco）公司的一套下一代策略管理解决方案。该方案提供了基于用户的业务规则、应用程序和网络资源的实时管理等功能。 Cisco CPS 18.1.0之前版本中的Open Systems Gateway initiative (OSGi)界面存在安全漏洞，该漏洞源于程序缺少身份验证。远程攻击者可利用该漏洞直接连接到OSGi界面，访问或更改OSGi进程可访问的任意文件。
英文描述:
A vulnerability in the Open Systems Gateway initiative (OSGi) interface of Cisco Policy Suite before 18.1.0 could allow an unauthenticated, remote attacker to directly connect to the OSGi interface. The vulnerability is due to a lack of authentication. An attacker could exploit this vulnerability by directly connecting to the OSGi interface. An exploit could allow the attacker to access or change any files that are accessible by the OSGi process. Cisco Bug IDs: CSCvh18017.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| cisco | mobility_services_engine | 14.0.0 | - | - |
cpe:2.3:a:cisco:mobility_services_engine:14.0.0:*:*:*:*:*:*:*
|
| cisco | policy_suite | * | - | - |
cpe:2.3:a:cisco:policy_suite:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2018-0377 |
2025-11-11 15:19:35 | 2025-11-11 07:34:57 |
| NVD | nvd_CVE-2018-0377 |
2025-11-11 14:55:57 | 2025-11-11 07:43:33 |
| CNNVD | cnnvd_CNNVD-201807-1296 |
2025-11-11 15:10:03 | 2025-11-11 07:53:49 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 授权问题
- cnnvd_id: 未提取 -> CNNVD-201807-1296
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- severity: SeverityLevel.MEDIUM -> SeverityLevel.CRITICAL
- cvss_score: 未提取 -> 9.8
- cvss_vector: NOT_EXTRACTED -> CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- cvss_version: NOT_EXTRACTED -> 3.0
- affected_products_count: 0 -> 2
- data_sources: ['cve'] -> ['cve', 'nvd']