CVE:CVE-2018-0294
CNNVD:CNNVD-201806-1053
Cisco Firepower 4100 Series Next-Generation Firewalls等都是美国思科（Cisco）公司的产品。Cisco Firepower 4100 Series Next-Generation Firewalls是一款4100系列的防火墙设备。Nexus 1000V Series Switches是一款1000V系列的交换机设备。FXOS Software是一套运行在思科安全设备中的防火墙软件。NX-OS Software是运行在思科交换机设备中的一套数据中心级操作系统软件。
多款Cisco产品中的FXOS Software和NX-OS Software的写入清除功能存在权限许可和访问控制漏洞，该漏洞源于在程序使用CLI命令来清除设备配置并重新加载设备时，受影响的软件没有正确的删除敏感文件。本地攻击者可利用该漏洞该配置一个未授权的管理员账户。以下产品受到影响：Cisco Firepower 4100 Series Next-Generation Firewalls；Firepower 9300 Security Appliance；Nexus 1000V Series Switches；Nexus 1100 Series Cloud Services Platforms；Nexus 2000 Series Fabric Extenders；Nexus 3500 Platform Switches；Nexus 4000 Series Switches；Nexus 5500 Platform Switches；Nexus 5600 Platform Switches；Nexus 6000 Series Switches；UCS 6100 Series Fabric Interconnects；UCS 6200 Series Fabric Interconnects；UCS 6300 Series Fabric Interconnects。
solution:Upgrade cisco nx-os to a higher version than 7.3(2n1(0.354,5.2(1sv3(1.10,8.8(3.5s0,7.0(3i2(4a,4.1(2e1(1a,and avoid the version 7.3(2)n1(0.354),5.2(1)sv3(1.10),8.8(3.5)s0,7.0(3)i2(4a),4.1(2)e1(1a); Upgrade cisco firepower_extensible_operating_system to a higher version than 2.1.1.86,2.2.2.17,and avoid the version [2.1.1,2.1.1.86),[2.2,2.2.2.17); Upgrade cisco fxos to a higher version than 2.0.1.159,and avoid the version [1.1,2.0.1.159)