Cisco ACE vuln - update available
- http://www.cisco.com/warp/public/707/cisco…00811-ace.shtml
2010 August 11 - "The Cisco ACE Application Control Engine Module and Cisco ACE 4710 Application Control Engine contain the following DoS vulnerabilities:
• Real-Time Streaming Protocol (RTSP) inspection DoS vulnerability
• HTTP, RTSP, and Session Initiation Protocol (SIP) inspection DoS vulnerability
• Secure Socket Layer (SSL) DoS vulnerability
• SIP inspection DoS vulnerability
Cisco has released free software updates for affected customers. Workarounds that mitigate some of the vulnerabilities are available.
Note: These vulnerabilities are independent of each other. A device may be affected by one vulnerability and not affected by another…"
Cisco WCS SQL Injection - update available
- http://www.cisco.com/warp/public/707/cisco…00811-wcs.shtml
2010 August 11 - "Cisco Wireless Control System (WCS) contains a SQL injection vulnerability that could allow an authenticated attacker full access to the vulnerable device, including modification of system configuration; create, modify and delete users; or modify the configuration of wireless devices managed by WCS. Cisco has released free software updates that address this vulnerability. There are no workarounds for this vulnerability…"
Cisco Wireless LAN Controllers - multiple vulns…
- http://cisco.com/warp/public/707/cisco-sa-20100908-wlc.shtml
2010 September 08 - "Summary:
The Cisco Wireless LAN Controller (WLC) product family is affected by these vulnerabilities:
• Two denial of service (DoS) vulnerabilities
• Three privilege escalation vulnerabilities
• Two access control list (ACL) bypass vulnerabilities
Note: These vulnerabilities are independent of one another. A device may be affected by one vulnerability and not affected by another.
Cisco has released free software updates that address these vulnerabilities.
There are no workarounds to mitigate these vulnerabilities…" (See "Affected Products" and "Software Versions and Fixes"…)
- http://secunia.com/advisories/41357/
Release Date: 2010-09-09
Impact: Security Bypass, Privilege escalation, DoS
Where: From local network
… The vulnerabilities are reported in the following products:
* Cisco 2000 Series WLCs
* Cisco 2100 Series WLCs
* Cisco 4100 Series WLCs
* Cisco 4400 Series WLCs
* Cisco 5500 Series WLCs
* Cisco Wireless Services Modules (WiSMs)
* Cisco WLC Modules for Integrated Services Routers (ISRs)
* Cisco Catalyst 3750G Integrated WLCs
Solution: Update to a fixed version (Please see vendor's advisory for details).
Original Advisory: cisco-sa-20100908-wlc: http://www.cisco.com/warp/public/707/cisco…00908-wlc.shtml
CiscoWorks vuln - updates available
- http://www.cisco.com/warp/public/707/cisco…101027-cs.shtml
2010 October 27 - "CiscoWorks Common Services for both Oracle Solaris and Microsoft Windows contains a vulnerability that could allow a remote unauthenticated attacker to execute arbitrary code on a host device with privileges of a system administrator. Cisco has released free software updates that address this vulnerability. There are no workarounds that mitigate this vulnerability…"
CiscoWorks Common Services vuln - updates available
- http://www.cisco.com/warp/public/707/cisco…101027-cs.shtml
Revision 1.2 - Updated: Nov 05, 2010 - "CiscoWorks Common Services for both Oracle Solaris and Microsoft Windows contains a vulnerability that could allow a remote unauthenticated attacker to execute arbitrary code on a host device with privileges of a system administrator. Cisco has released free software updates that address this vulnerability. There are no workarounds that mitigate this vulnerability. Mitigations that limit the attack surface of this vulnerability are available… The vulnerability could be exploited over TCP port 443 or 1741.
Note: The default HTTP and HTTPS ports can be reconfigured on the server.
The vulnerability affects both CiscoWorks Common Services for Oracle Solaris and Microsoft Windows…"
Cisco UVC VxWorks - multiple vulns
- http://www.securitytracker.com/id?1024753
Nov 17 2010 - "… Solution: No solution was available at the time of this entry. The vendor has described some mitigation steps in their advisory.
The vendor's advisory is available at: http://www.cisco.com/warp/public/707/cisco…-cuvc.shtml#add
2010 November 17 - "… Administrators can mitigate these vulnerabilities by limiting access to Cisco UVC web server to trusted hosts by disabling FTP, SSH, and Telnet services and by setting the "Security mode" field in the "Security" section of the Cisco UVC web GUI to "Maximum"…"
Cisco / Tandberg E, EX and C Series Endpoints vuln…
- http://www.cisco.com/en/US/customer/produc…080b69541.shtml
2011 February 2 - "… Tandberg devices are part of the Cisco TelePresence Systems that provide Cisco TelePresence endpoints for immersive environments, conference rooms, individual desktops and home offices. The C Series Endpoints are typically deployed as Multipurpose Room Systems and the E/EX Personal Video units are desktop devices. These devices contain a root user that is enabled for advanced debugging that is unnecessary during normal operations. The root account is not the same as the admin and user accounts. The root user is enabled by default in software versions prior to TC 4.0.0. The default configuration prior to TC 4.0.0 does not set a password for the root user. When a device is upgraded to TC 4.0.0, the root user is disabled. System software for Tandberg C Series Endpoints and E/EX Personal Video units is available for download at: http://www.tandberg.com/support/video-conf…ownload.jsp?t=2
For instructions on how to set a root password or disable the root user on other software versions, see the workaround section of this advisory. This vulnerability has been assigned the CVE ID CVE-2011-0354…"
- http://secunia.com/advisories/43158/
Release Date: 2011-02-03
Criticality level: Moderately critical
Impact: System access
Where: From local network
… The security issue is reported in versions prior to TC 4.0.0…
Cisco WebEx player vulns…
- http://www.cisco.com/warp/public/707/cisco…201-webex.shtml
2011 February 1 - "Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Recording Format (WRF) and Advanced Recording Format (ARF) Players. In some cases, exploitation of the vulnerabilities could allow a remote attacker to execute arbitrary code on the system of a targeted user… Multiple buffer overflow vulnerabilities exist in the WRF and ARF players. The vulnerabilities may lead to a crash of the player application or, in some cases, remote code execution could occur… These vulnerabilities have been assigned the following Common Vulnerabilities and Exposures (CVE) identifiers: CVE-2010-3269, CVE-2010-3041, CVE-2010-3042, CVE-2010-3043, CVE-2010-3044
…If a recording player was automatically installed, it will be automatically upgraded to the latest, nonvulnerable version when users access a recording file that is hosted on a WebEx server. If a WebEx recording player was manually installed, users will need to manually install a new version of the player after downloading the latest version from http://www.webex.com/downloadplayer.html …"
- http://secunia.com/advisories/43122/
Last Update: 2011-02-03
Criticality level: Highly critical
Impact: System access
Where: From remote
Solution: Update to build T27LC SP22 and T27LB SP21 EP3…
Cisco Network Access Control Guest Server System vuln
- http://www.cisco.com/warp/public/707/cisco…10330-nac.shtml
2011 March 30 - "Cisco Network Access Control (NAC) Guest Server system software contains a vulnerability in the RADIUS authentication software that may allow an unauthenticated user to access the protected network.
Cisco has released free software updates that address this vulnerability… This vulnerability may result in authentication bypass without requiring a valid username or password…"
CVE-2011-0963
- http://www.securitytracker.com/id/1025272
Mar 30 2011
Cisco Secure Access Control System Unauthorized Password Change vuln
- http://www.cisco.com/warp/public/707/cisco…10330-acs.shtml
2011 March 30 - "A vulnerability exists in some Cisco Secure Access Control System (ACS) versions that could allow a remote, unauthenticated attacker to change the password of any user account to any value without providing the account's previous password. Successful exploitation requires the user account to be defined on the internal identity store.
This vulnerability does not allow an attacker to perform any other changes to the ACS database. That is, an attacker cannot change access policies, device properties, or any account attributes except the user password.
Cisco has released free software updates that address this vulnerability. There is no workaround for this vulnerability…"
CVE-2011-0951 Identifying and Mitigating Exploitation of the Cisco Secure Access Control System Unauthorized Password Change vuln
- http://www.cisco.com/warp/public/707/cisco…10330-acs.shtml
2011 March 30
- http://isc.sans.edu/diary.html?storyid=10627
Last Updated: 2011-04-01 14:38:48 UTC …(Version: 2)
"Update: Cisco PSIRT have provided the following information. Only users configured on one of the ACS internal identity stores are vulnerable. Users configured for administration of the ACS are -not- vulnerable. Users configured on external identity stores are -not- vulnerable."
- http://www.cisco.com/go/psirt/
