CVE-2018-0365
A vulnerability in the web-based management interface of Cisco Firepower Management Center could...
A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions on the targeted device via a web browser and with the privileges of the user. Cisco Bug IDs: CSCvb19750.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions on the targeted device via a web browser and with the privileges of the user. Cisco Bug IDs: CSCvb19750.
- Record
CVE-2018-0365- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-352
- Updated
- 2026-11-02
CVE List No score
A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions on the targeted device via a web browser and with the privileges of the user. Cisco Bug IDs: CSCvb19750.
- Record
CVE-2018-0365- Weakness
- CWE-352
- Updated
- 2026-11-02
EUVDEUVD-2018-1188 No score
A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions on the targeted device via a web browser and with the privileges of the user. Cisco Bug IDs: CSCvb19750.
- Record
EUVD-2018-1188- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hcc8-28g7-82jh
A vulnerability in the web-based management interface of Cisco Firepower Management Center could...
A vulnerability in the web-based management interface of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions on the targeted device via a web browser and with the privileges of the user. Cisco Bug IDs: CSCvb19750.
- Record
GHSA-hcc8-28g7-82jh- CVSS 3.0
- 8.8 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-352
- Updated
- 2026-11-02
Affected products
- cisco amp 7150 firmware
- cisco amp 8150 firmware
- cisco firepower appliance 7010 firmware
- cisco firepower appliance 7020 firmware
- cisco firepower appliance 7030 firmware
- cisco firepower appliance 7050 firmware
- cisco firepower appliance 7110 firmware
- cisco firepower appliance 7115 firmware
- cisco firepower appliance 7120 firmware
- cisco firepower appliance 7125 firmware
- cisco firepower appliance 8120 firmware
- cisco firepower appliance 8130 firmware
Show 20 moreShow less
- cisco firepower appliance 8140 firmware
- cisco firepower appliance 8250 firmware
- cisco firepower appliance 8260 firmware
- cisco firepower appliance 8270 firmware
- cisco firepower appliance 8290 firmware
- cisco firepower appliance 8350 firmware
- cisco firepower appliance 8360 firmware
- cisco firepower appliance 8370 firmware
- cisco firepower appliance 8390 firmware
- cisco firepower management center 1000 firmware
- cisco firepower management center 2000 firmware
- cisco firepower management center 2500 firmware
- cisco firepower management center 4000 firmware
- cisco firepower management center 4500 firmware
- cisco firepower management center virtual appliance
- cisco firesight management center 1500 firmware
- cisco firesight management center 3500 firmware
- cisco firesight management center 750 firmware
- cisco ngips virtual appliance
- cisco secure firewall management center
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-0365 is a high vulnerability (CVSS 8.8) in Cisco Amp 7150 Firmware, published June 21, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.90%, the 60th percentile. No source names a fixed version.