CVE-2018-0468 — HIGH (7.8) — White Hats Nepal

Vulnerability Description

A vulnerability in the configuration of a local database installed as part of the Cisco Energy Management Suite (CEMS) could allow an authenticated, local attacker to access and alter confidential data. The vulnerability is due to the installation of the PostgreSQL database with unchanged default access credentials. An attacker could exploit this vulnerability by logging in to the machine where CEMS is installed and establishing a local connection to the database. The fix for this vulnerability randomizes the database access password in new installations; however, the fix will not change the password for existing installations. Users are required to manually change the password, as documented in the Workarounds section of this advisory. There are workarounds that address this vulnerability.

CVSS Score

7.8

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Cisco	Energy Management Suite	5.2

Related Weaknesses (CWE)

CWE-798

References

http://www.securityfocus.com/bid/106124Third Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2Vendor Advisory
https://www.tenable.com/security/research/tra-2018-42Broken LinkThird Party Advisory
http://www.securityfocus.com/bid/106124Third Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-2Vendor Advisory
https://www.tenable.com/security/research/tra-2018-42Broken LinkThird Party Advisory

FAQ

What is CVE-2018-0468?

CVE-2018-0468 is a vulnerability with a CVSS score of 7.8 (HIGH). A vulnerability in the configuration of a local database installed as part of the Cisco Energy Management Suite (CEMS) could allow an authenticated, local attacker to access and alter confidential dat...

How severe is CVE-2018-0468?

CVE-2018-0468 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-0468?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Energy Management Suite.