CVE-2018-0463

Name of the Vulnerable Software and Affected Versions Cisco Network Services Orchestrator (NSO) (affected versions not specified)

Description A vulnerability exists in the Cisco Network Plug and Play server component due to incomplete validation when using secure unique device identifiers (SUDI) for authentication. This allows an unauthenticated, remote attacker to gain unauthorized access to configuration data stored on the system. The attacker must control a Cisco device that supports SUDI authentication, have connectivity to the affected system, and leverage information about devices being registered to send crafted authentication packets.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.