TI-2018-00288 Aliases CVE-2018-0329 GHSA-59gg-4m9f-5hc8

Hard-coded credentials in Cisco Wide Area Application Services unknown

LOW 35CWE-798Published 2018-06-07 · Updated 2024-11-29

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: Low · None · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-798.

Summary

A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Cisco Wide Area Application Services (WAAS) Software could allow an unauthenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to a hard-coded, read-only community string in the configuration file for the SNMP daemon. An attacker could exploit this vulnerability by using the static community string in SNMP version 2c queries to an affected device. A successful exploit could allow the attacker to read any data that is accessible via SNMP on the affected device. Note: The static credentials are defined in an internal configuration file and are not visible in the current operation configuration ('running-config') or the startup configuration ('startup-config'). Cisco Bug IDs: CSCvi40137.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.02317 83rd percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	Cisco Wide Area Application Services unknown	Cisco Wide Area Application Services unknown	—	No fix listed	CNA

Cisco Wide Area Application Services unknown Vendor— Affected Cisco Wide Area Application Services unknown Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:cisco:wide_area_application_services:6.2\(3\):::::::*	6.2(3)	Vulnerable	Cisco
cpe:2.3:a:cisco:wide_area_application_services:6.4\(1\):::::::*	6.4(1)	Vulnerable	Cisco

cpe:2.3:a:cisco:wide_area_application_services:6.2\(3\):*:*:*:*:*:*:* Versions 6.2(3) Vulnerable ·Cisco
cpe:2.3:a:cisco:wide_area_application_services:6.4\(1\):*:*:*:*:*:*:* Versions 6.4(1) Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2018-0329
2026-10-03 Alias added: GHSA-59gg-4m9f-5hc8

References

Advisory 1

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-waas-snmp

TI-2013-03008 The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before… CVSS 2.0HIGH 10.0
TI-2013-03009 The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before… CVSS 2.0HIGH 9.0
TI-2014-01739 Cisco Wide Area Application Services (WAAS) 5.1.1 before 5.1.1e, when SharePoint prefetch… CVSS 2.0HIGH 9.3
TI-2007-03800 The Common Internet File System (CIFS) optimization in Cisco Wide Area Application… CVSS 2.0HIGH 7.8
TI-2015-05404 cifs-ao in the CIFS optimization functionality on Cisco Wide Area Application Service… CVSS 3.0HIGH 7.5
TI-2017-04387 Resource management flaw in Cisco Wide Area Application Services SMART-SSL Accelerator CVSS 3.0MEDIUM 6.8

See all 19 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences