← Vulnerability feed

Vulnerability record · CVE-2018-0352 · published 7 June 2018

CVE-2018-0352: Cisco wide area application services permissions and access controls vulnerability

Cisco · Wide Area Application Services

A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to elevate their privilege level to root. The attacker must have valid user credentials with super user privileges (level 15) to log in to the device. The vulnerability is due to insufficient validation of script files executed in the context of the Disk Check Tool. An attacker could exploit this vulnerability by replacing one script file with a malicious script file while the affected tool is running. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device. Cisco Bug IDs: CSCvi72673.

6.7 CVSS 3.0 Medium EPSS 0.39% · top 69.3% CWE-264 · Permissions and access controlsCWE-732 · Incorrect permission assignment
6.7CVSS 3.0 base score, v2 7.2
0.39%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to elevate their privilege level to root. The attacker must have valid user credentials with super user privileges (level 15) to log in to the device. The vulnerability is due to insufficient validation of script files executed in the context of the Disk Check Tool. An attacker could exploit this vulnerability by replacing one script file with a malicious script file while the affected tool is running. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device. Cisco Bug IDs: CSCvi72673.

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/104464 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041077 Third Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-waas-priv-escalation Vendor Advisory
http://www.securityfocus.com/bid/104464 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1041077 Third Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-waas-priv-escalation Vendor Advisory

Track CVE-2018-0352 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2013-3443Cisco wide area application services improper input validation vulnerabilityThe web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager (CM) con…EPSS 6.0%9.3CVE-2014-2196Cisco wide area application services code injection vulnerabilityCisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch optimization is enabled, allows remote SharePoint servers t…EPSS 2.4%9.0CVE-2013-3444Cisco wide area application services os command injection vulnerabilityThe web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5…EPSS 4.2%7.8CVE-2007-3923Cisco wide area application services vulnerabilityThe Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE appliance an…EPSS 2.0%7.5CVE-2015-6421Cisco wide area application services vulnerabilitycifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service (WAAS) and Virtual WAAS (vWAAS) devices 5.x before 5.3.5d and 5…EPSS 1.9%6.8CVE-2017-6628Cisco wide area application services vulnerabilityA vulnerability in SMART-SSL Accelerator functionality for Cisco Wide Area Application Services (WAAS) 6.2.1, 6.2.1a, and 6.2.3a could allow an unaut…EPSS 1.7%6.5CVE-2017-12256Cisco wide area application services vulnerabilityA vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remote attack…EPSS 1.4%5.9CVE-2016-6437Cisco wide area application services vulnerabilityA vulnerability in the SSL session cache management of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to…EPSS 1.7%

Source: NIST National Vulnerability Database (record CVE-2018-0352), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.