CVE-2018-11750

EPSS 0.27%
Published 02.10.2018 19:29:00
Last modified 21.11.2024 03:43:57
Source security@puppet.com
Teams watchlist Login
Open Login

Previous releases of the Puppet cisco_ios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of cisco_ios, host key checking is enabled by default.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Puppet ≫ Cisco Ios Module SwPlatformpuppet Version < 0.4.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.27%	0.474

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://puppet.com/security/cve/CVE-2018-11750

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/150978

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-11750

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-11750

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-11750

EUVD