Cisco ASA Software - multiple vulns
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
2014 Oct 8 - "Summary: Cisco Adaptive Security Appliance (ASA) Software is affected by the following vulnerabilities:
- Cisco ASA SQL*NET Inspection Engine Denial of Service Vulnerability
- Cisco ASA VPN Denial of Service Vulnerability
- Cisco ASA IKEv2 Denial of Service Vulnerability
- Cisco ASA Health and Performance Monitor Denial of Service Vulnerability
- Cisco ASA GPRS Tunneling Protocol Inspection Engine Denial of Service Vulnerability
- Cisco ASA SunRPC Inspection Engine Denial of Service Vulnerability
- Cisco ASA DNS Inspection Engine Denial of Service Vulnerability
- Cisco ASA VPN Failover Command Injection Vulnerability
- Cisco ASA VNMC Command Input Validation Vulnerability
- Cisco ASA Local Path Inclusion Vulnerability
- Cisco ASA Clientless SSL VPN Information Disclosure and Denial of Service Vulnerability
- Cisco ASA Clientless SSL VPN Portal Customization Integrity Vulnerability
- Cisco ASA Smart Call Home Digital Certificate Validation Vulnerability
These vulnerabilities are independent of one another; a release that is affected by one of the vulnerabilities may not be affected by the others… Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate some of these vulnerabilities are available…"
- http://www.securitytracker.com/id/1030979
CVE Reference: CVE-2014-3382, CVE-2014-3383, CVE-2014-3384, CVE-2014-3385, CVE-2014-3386, CVE-2014-3387, CVE-2014-3388, CVE-2014-3389, CVE-2014-3390, CVE-2014-3391, CVE-2014-3392, CVE-2014-3393, CVE-2014-3394
Oct 9 2014
Impact: Denial of service via network, Disclosure of authentication information, Disclosure of system information, Execution of arbitrary code via network, Modification of user information, User access via local system, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to versions 7.2(5.15), 8.4(7.23), 8.6(1.15), 8.7(1.14), 9.0(4.24), 9.1(5.12), 9.2(2.8), and 9.3(1.1) …
SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vuln
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle
2014 Oct 15 - "Summary: On October 14, 2014, a vulnerability was publicly announced in the Secure Sockets Layer version 3 (SSLv3) protocol when using a block cipher in Cipher Block Chaining (CBC) mode. SSLv3 is a cryptographic protocol designed to provide communication security, which has been superseded by Transport Layer Security (TLS) protocols. By exploiting this vulnerability, an attacker could decrypt a subset of the encrypted communication.
Affected Products: Cisco is evaluating products to determine their exposure to this vulnerability.
Products will be listed in the Vulnerable Products section of this advisory if they fit both the following criteria:
SSLv3 is supported by the product
A block cipher in CBC mode is one of the transform sets being offered
Products will be listed in the Products Confirmed Not Vulnerable section of this advisory if they fit either of the following criteria:
SSLv3 is not supported by the product
SSLv3 is supported by the product but no block cipher in CBC mode is offered in the transform set…
The list of vulnerable products will be populated as the products are being evaluated…"
Cisco TelePresence Video Communication Server and Cisco Expressway Software Multiple Vulns
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-vcs
2014 Oct 15 - "Summary: Cisco TelePresence Video Communication Server (VCS) and Cisco Expressway Software includes the following vulnerabilities:
Cisco TelePresence VCS and Cisco Expressway Crafted Packets Denial of Service Vulnerability
Cisco TelePresence VCS and Cisco Expressway SIP IX Filter Denial of Service Vulnerability
Cisco TelePresence VCS and Cisco Expressway SIP Denial of Service Vulnerability
Succesfull exploitation of any of these vulnerabilities could allow an unauthenticated, remote attacker to cause a reload of the affected system, which may result in a Denial of Service (DoS) condition. Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are not available…"
- http://www.securitytracker.com/id/1031055
CVE Reference: CVE-2014-3368, CVE-2014-3369, CVE-2014-3370
Oct 15 2014
Fix Available: Yes Vendor Confirmed: Yes …
Impact: A remote user can cause the target system to crash and reload.
Solution: The vendor has issued a fix (X8.2)…
Cisco TelePresence MCU Software Memory Exhaustion Vuln
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-mcu
2014 Oct 15 - "Summary: A vulnerability in the network stack of Cisco TelePresence MCU Software could allow an unauthenticated, remote attacker to cause the exhaustion of available memory which could lead to system instability and a reload of the affected system. Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available…"
- http://www.securitytracker.com/id/1031054
CVE Reference: CVE-2014-3397
Oct 15 2014
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to 4.3(2.30)…
The following models are affected:
Cisco TelePresence MCU 4200 Series
Cisco TelePresence MCU 4500 Series
Cisco TelePresence MCU MSE 8420
Impact: A remote user can consume all available memory, causing the system to become unstable and reload.
Solution: The vendor has issued a fix (4.3(2.30))…
Cisco Unified Communications Domain Manager Multiple Vulns
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140702-cucdm
2014 Oct 13 - Rev. 3.0 - "Summary: Cisco Unified Communications Domain Manager (Cisco Unified CDM) is affected by the following vulnerabilities:
- Cisco Unified Communications Domain Manager Privilege Escalation Vulnerability
- Cisco Unified Communications Domain Manager Default SSH Key Vulnerability
- Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability
Successful exploitation of the Cisco Unified Communications Domain Manager Privilege Escalation Vulnerability or of the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability may allow an attacker to execute arbitrary commands or obtain privileged access to the affected system.
Successful exploitation of the Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability may allow an attacker to access and modify BVSMWeb portal user information such settings in the personal phone directory, speed dials, Single Number Reach, and call forward settings.
Cisco has released free software updates that address the Cisco Unified Communications Domain Manager Privilege Escalation Vulnerability and the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability.
Cisco will provide a free software update for the Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability as soon as the fix is available. Workarounds that mitigate these vulnerabilities are not available. Customers that are concerned about the Cisco Unified Communications Domain Manager BVSMWeb Unauthorized Data Manipulation Vulnerability may apply the mitigation detailed in the "Workarounds" section of this advisory. Note: Due to an error in the fix of the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability, all Cisco Unified CDM Platform Software releases are vulnerable regardless if a previous patch has been applied due to this security advisory. This advisory has been updated to provide additional information about the fix for the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability…"
Rev 3.0 - 2014-Oct-13 - Added important information regarding fixed versions of the Cisco Unified Communications Domain Manager Default SSH Key Vulnerability.
Cisco IronPort Appliances Telnet Remote Code Execution vuln
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120126-ironport
Rev 2.0 - 2014 Oct 16 - "Summary: Cisco AsyncOS Software for Cisco Web Security Appliance (WSA), Cisco Email Security Appliance (ESA), and Cisco Content Security Management Appliance (SMA) contain a vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code with elevated privileges. Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are available…"
Rev2.0 - 2014-Oct-16 - Added important information about Cisco WSA.
See "Software Versions and Fixes": Cisco ESA, SME, WSA
- https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4862 - 10.0 (HIGH)
Cisco Small Business RV Series Routers - multiple vulns
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141105-rv
Nov 5, 2014 - "Summary: The Cisco RV120W Wireless-N VPN Firewall, Cisco RV180 VPN Router, Cisco RV180W Wireless-N Multifunction VPN Router, and Cisco RV220W Wireless Network Security Firewall are affected by the following vulnerabilities:
Cisco RV Series Routers Command Injection Vulnerability
Cisco RV Series Routers HTTP Referer Header Vulnerability
Cisco RV Series Routers Insecure File Upload Vulnerability
These vulnerabilities are independent of each other; a release that is affected by one of the vulnerabilities may not be affected by the others. Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available…"
- http://www.securitytracker.com/id/1031171
CVE Reference: CVE-2014-2177, CVE-2014-2178, CVE-2014-2179
Nov 6 2014
Impact: Execution of arbitrary code via network, Modification of user information, Root access via network, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): Models RV120W, RV180, RV180W, and RV220W…
Solution: The vendor has issued a fix (RV180 firmware version 1.0.4.14, RV180W firmware version 1.0.4.14, RV120W firmware [removed]). The vendor plans to issue a fix for Cisco model RV220W Wireless Network Security Firewall Release during November 2014…
SSL Padding Oracle On Downgraded Legacy Encryption (POODLE) Vulnerability - Updated
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141015-poodle
Rev.1.11 - 2014 Nov 21 - Moved Cisco Network Collector, Cisco Prime Collaboration Provisioning, Cisco Unified Intelligence Center (UIC), Cisco Computer Telephony Integration Object Server (CTIOS), Cisco Emergency Responder, Cisco Paging Server, Cisco Unified Contact Center Enterprise (UCCE), Cisco Videoscape Distribution Suite for Internet Streaming to the Vulnerable Products section. Updated Products Not Vulnerable and Products Under Investigation sections.
Multiple Vulnerabilities in -ntpd- Affecting Cisco Products
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141222-ntpd
Dec 22, 2014 - "Summary: Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code or create a denial of service (DoS) condition.
On December 19, 2014, NTP.org and US-CERT released security advisories detailing two issues regarding weak cryptographic pseudorandom number generation (PRNG), three buffer overflow vulnerabilities, and an unhandled error condition with an unknown impact. The vulnerabilities are referenced in this document as follows:
CVE-2014-9293: Weak Default Key in config_auth()
CVE-2014-9294: Noncryptographic Random Number Generator with Weak Seed Used by ntp-keygen to Generate Symmetric Keys
CVE-2014-9295: Multiple Buffer Overflow Vulnerabilities in ntpd
CVE-2014-9296: ntpd receive(): Missing Return on Error
This advisory will be updated as additional information becomes available. Cisco will release free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are available…" Rev1.9 - 2015Jan9 - Updated the Affected Products, Vulnerable Products, and Products Confirmed Not Vulnerable sections.
Cisco WebEx Meetings Server Command Injection Vuln
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150204-wbx
2015 Feb 4 - "Summary: A vulnerability in the administrative web interface of Cisco WebEx Meetings Server could allow an authenticated, remote attacker to execute arbitrary commands on the affected system and on the devices managed by the affected system. The vulnerability is due to improper user input validation. An attacker could exploit this vulnerability by crafting input into the affected fields of the web interface. Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available…"
- http://www.securitytracker.com/id/1031692
CVE Reference: https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0589 - 9.0 (HIGH)
Feb 4 2015
GNU glibc gethostbyname Function Buffer Overflow Vuln
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150128-ghost
2015 Feb 4 Rev1.5 - "Summary: On January 27, 2015, a buffer overflow vulnerability in the GNU C library (glibc) was publicly announced. This vulnerability is related to the various gethostbyname functions included in glibc and affect applications that call these functions. This vulnerability may allow an attacker to obtain sensitive information from an exploited system or, in some instances, perform remote code execution with the privileges of the application being exploited. The glibc library is a commonly used third-party software component that is released by the GNU software project and a number of Cisco products are likely affected. This advisory will be updated as additional information becomes available. Cisco will release free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available…
Rev1.5 - 2015-Feb-04: Updated the Affected Products, Vulnerable Products, and Products Confirmed Not Vulnerable sections."
Multiple Vulnerabilities in Cisco ASA Software
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa
2015 Feb 11 - Rev 2.0 - Added important information about Cisco ASA Clientless SSL VPN Portal Customization Integrity Vulnerability - CSCup36829 - in the "Vulnerable Products," "Software Versions and Fixes," and "Exploitation and Public Announcements" sections of this advisory.
Multiple Vulnerabilities in ntpd Affecting Cisco Products
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141222-ntpd
2015 Feb 11 - Rev 2.0 - Added the two new CVE IDs from ntp.org. Updated the Affected Products, Vulnerable Products, and Products Confirmed Not Vulnerable sections. Note: Cisco WebEx Meeting Server versions 2.x moved from Vulnerable to Not Vulnerable. Cisco Business Edition 3000 (BE3k) removed from advisory as end of life.
Cisco IOS XR Software IPv6 Malformed Packet DoS Vuln
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150220-ipv6
2015 Feb 20 - "Summary: A vulnerability in the parsing of malformed IP version 6 (IPv6) packets in Cisco IOS XR Software for Cisco Network Convergence System 6000 (NCS 6000) and Cisco Carrier Routing System (CRS-X) could allow an unauthenticated, remote attacker to cause a reload of a line card that is processing traffic. The vulnerability is due to improper processing of malformed IPv6 packets carrying extension headers. An attacker could exploit this vulnerability by sending a malformed IPv6 packet, carrying extension headers, through an affected Cisco IOS XR device line card. An exploit could allow the attacker to cause a reload of the line card on the affected Cisco IOS XR device. Cisco has released free software updates that address this vulnerability. There are no workarounds that address this vulnerability…"
Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140605-openssl
Rev 1.26 - 2015-Feb-25 - Updated the Affected Produccts and Confirmed Vulnerable Sections.
2014 June 5 - "Summary: Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to execute arbitrary code, create a denial of service (DoS) condition, or perform a man-in-the-middle attack. On June 5, 2014, the OpenSSL Project released a security advisory detailing seven distinct vulnerabilities. The vulnerabilities are referenced in this document as follows:
SSL/TLS Man-in-the-Middle Vulnerability
DTLS Recursion Flaw Vulnerability
DTLS Invalid Fragment Vulnerability
SSL_MODE_RELEASE_BUFFERS NULL Pointer Dereference Vulnerability
SSL_MODE_RELEASE_BUFFERS Session Injection or Denial of Service Vulnerability
Anonymous ECDH Denial of Service Vulnerability
ECDSA NONCE Side-Channel Recovery Attack Vulnerability
Please note that the devices that are affected by this vulnerability are the devices acting as a Secure Sockets Layer (SSL) or Datagram Transport Layer Security (DTLS) server terminating SSL or DTLS connections or devices acting as an SSL client initiating an SSL or DTLS connection. Devices that are simply traversed by SSL or DTLS traffic without terminating it are not affected. This advisory will be updated as additional information becomes available. Cisco will release free software updates that address these vulnerabilities…"
- http://www.cisco.com/web/about/security/intelligence/Cisco_ERP_OpenSSL_06052014.html
Cisco TelePresence Video Communication Server, Expressway, TelePresence Conductor - multiple vulns
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-vcs
2015 Mar 11 Rev 1.0 - "Summary: Cisco TelePresence Video Communication Server (VCS), Cisco Expressway and Cisco TelePresence Conductor contain the following vulnerabilities:
SDP Media Description Denial of Service Vulnerability
Authentication Bypass Vulnerability
Successful exploitation of the SDP Media Description Denial of Service Vulnerability may cause the affected system to reload. Successful exploitation of the Authentication Bypass Vulnerability may allow an attacker to bypass authentication and log in to the system with the privileges of an administrator. Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are not available…"
- http://www.securitytracker.com/id/1031910
CVE Reference: CVE-2015-0652, CVE-2015-0653
Mar 11 2015
Cisco Intrusion Prevention System MainApp Secure Socket Layer DoS Vuln
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150311-ips
2015 Mar 11 Rev 1.0 - "Summary: The Cisco Intrusion Prevention System (IPS) Software has a vulnerability within the SSL/TLS subsystem utilized by the web management interface which could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. Cisco has released free software updates that address this vulnerability…"
- http://www.securitytracker.com/id/1031908
CVE Reference: CVE-2015-0654
Mar 11 2015
Multiple Vulnerabilities in OpenSSL (January 2015) Affecting Cisco Products
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150310-ssl
Rev 1.1 - 2015-March-11 - Moved Cisco Content Security Management Appliance (SMA) from Not Vulnerable, to under Investigation. Updated the Affected Products, Vulnerable Products, and Products Confirmed Not Vulnerable sections.
OpenSSL (March 2015) Affecting Cisco Products - Multiple Vulnerabilities
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150320-openssl
2015 March 20 - Summary: Multiple Cisco products incorporate a version of the OpenSSL package affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or corrupt portions of OpenSSL process memory. On March 19, 2015, the OpenSSL Project released a security advisory detailing 13 distinct vulnerabilities… This advisory will be updated as additional information becomes available. Cisco will release free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities may be available…
Rev 1.0 - 2015-March-20 - Initial public release.
Cisco Unity Connection - Multiple Vulns
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-cuc
2015 April 1 - "Summary: Cisco Unity Connection contains multiple vulnerabilities, when it is configured with Session Initiation Protocol (SIP) trunk integration. The vulnerabilities described in this advisory are denial of service vulnerabilities impacting the availability of Cisco Unity Connection for processing SIP messages. Cisco has released free software updates that address these vulnerabilities. Workarounds that mitigate these vulnerabilities are not available…"
- http://www.securitytracker.com/id/1032010
CVE Reference: CVE-2015-0612, CVE-2015-0613, CVE-2015-0614, CVE-2015-0615, CVE-2015-0616
Apr 1 2015
Impact: Denial of service via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): prior to versions 8.5(1)SU7, 8.6(2a)SU4, 9.1(2)SU2, 10.0(1)SU1 …
Cisco Prime Data Center Network Manager File Information Disclosure Vuln
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150401-dcnm
2015 April 1 - "Summary: Cisco Prime Data Center Network Manager (DCNM) contains a file information disclosure vulnerability that could allow an unauthenticated, remote attacker to retrieve arbitrary files from the underlying operating system. Cisco has released free software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available…"
- http://www.securitytracker.com/id/1032009
CVE Reference: CVE-2015-0666
Apr 1 2015
Impact: Disclosure of system information, Disclosure of user information
Fix Available: Yes Vendor Confirmed: Yes
Version(s): 6.3(1) and after and prior to 7.1(1) …
Cisco IOS XE Software for Cisco ASR 1000 Series, Cisco ISR 4400 Series, and Cisco Cloud Services 1000v Series Routers - Multiple Vulns
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150325-iosxe
Rev 1.1 - 2015-April-01 - Edited Software Versions and Fixes section.
"Summary: Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers (ASR), Cisco 4400 Series Integrated Services Routers (ISR), and Cisco Cloud Services Routers (CSR) 1000v Series contains the following vulnerabilities:
Cisco IOS XE Software Fragmented Packet Denial of Service Vulnerability
Cisco IOS XE Software Crafted TCP Packet Remote Code Execution Vulnerability
Cisco IOS XE Software Crafted IPv6 Packet Denial of Service Vulnerability
Cisco IOS XE Software Layer 4 Redirect Crafted Packet Denial of Service Vulnerability
Cisco IOS XE Software Common Flow Table Crafted Packet Denial of Service Vulnerability
These vulnerabilities are independent of each other; a release that is affected by one of the vulnerabilities may not be affected by the others…Cisco has released free software updates that address these vulnerabilities…"
