CVE-2018-15374

A vulnerability in the Image Verification feature of Cisco IOS XE Software could allow an authenticated, local attacker to install a malicious software image or file on an affected device. The vulnerability is due to the affected software improperly verifying digital signatures for software images and files that are uploaded to a device. An attacker could exploit this vulnerability by uploading a malicious software image or file to an affected device. A successful exploit could allow the attacker to bypass digital signature verification checks for software images and files and install a malicious software image or file on the affected device.

• CWE-347
• CWE-347

• http://www.securityfocus.com/bid/105415Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-digsigVendor Advisory
• http://www.securityfocus.com/bid/105415Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180926-digsigVendor Advisory

Published

Oct 5, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15368A vulnerability in the CLI parser of Cisco IOS XE Software c…6.7
• CVE-2018-15369A vulnerability in the TACACS+ client subsystem of Cisco IOS…
• CVE-2018-15370A vulnerability in Cisco IOS ROM Monitor (ROMMON) Software f…
• CVE-2018-15371A vulnerability in the shell access request mechanism of Cis…
• CVE-2018-15372A vulnerability in the MACsec Key Agreement (MKA) using Exte…
• CVE-2018-15373A vulnerability in the implementation of Cisco Discovery Pro…
• CVE-2018-15375A vulnerability in the embedded test subsystem of Cisco IOS …
• CVE-2018-15376A vulnerability in the embedded test subsystem of Cisco IOS …
• CVE-2018-15377A vulnerability in the Cisco Network Plug and Play agent, al…8.6
• CVE-2018-15378A vulnerability in ClamAV versions prior to 0.100.2 could al…
• CVE-2018-15379A vulnerability in which the HTTP web server for Cisco Prime…
• CVE-2018-15380A vulnerability in the cluster service manager of Cisco Hype…8.8