Cisco ASR 9000 Series Routers…
- http://www.cisco.com/warp/public/707/cisco…720-asr9k.shtml
2011 July 20
Cisco 9000 Series Aggregation Services Routers (ASR) running Cisco IOS XR Software version 4.1.0 contain a vulnerability that may cause a network processor in a line card to lock up while processing an IP version 4 (IPv4) packet. As a consequence of the network processor lockup, the line card that is processing the offending packet will automatically reload. Cisco has released a free software maintenance upgrade (SMU) to address this vulnerability…
Cisco SA 500 Series Security Appliances
- http://www.cisco.com/warp/public/707/cisco…720-sa500.shtml
2011 July 20
Cisco SA 500 Series Security Appliances are affected by two vulnerabilities on their web-based management interface. An attacker must have valid credentials for an affected device to exploit one vulnerability; exploitation of the other does not require authentication. Both vulnerabilities can be exploited over the network. Cisco has released free software updates that address these vulnerabilities…
___
Cisco mitigation Bulletin: Default credentials - Root Account - TelePresence Recording Svr
- http://www.cisco.com/warp/public/707/cisco…110729-tp.shtml
29-Jul-2011 - "Cisco TelePresence Recording Server Software Release 1.7.2.0 includes a root administrator account that is enabled by default. Successful exploitation of the vulnerability could allow a remote attacker to use these default credentials to modify the system configuration and settings…
CVE Reference: CVE-2011-2555
Workarounds: A workaround exists to mitigate and fix this vulnerability. The workaround requires manual intervention on the affected system. Please contact the Cisco Technical Assistance Center (TAC) for instructions on how to implement this workaround. Customers are advised to migrate to Cisco TelePresence Recording Server software version 1.7.2.1…
Device-Specific Mitigation and Identification: Specific information about mitigation and identification is available for these devices:
Cisco IOS Routers and Switches
Cisco IOS NetFlow
Cisco ASA and FWSM Firewalls …
Cisco has released free software updates that address this vulnerability…"
- http://tools.cisco.com/security/center/searchAIR.x
Cisco - infected CDs …
- http://www.cisco.com/warp/public/707/cisco…110803-cd.shtml
2011 August 03 - "… In the period of December 2010 until August 2011, Cisco shipped warranty CDs that contain a reference to a third-party website known to be a malware repository. When the CD is opened with a web browser, it automatically and without warning accesses this third-party website. Additionally, on computers where the operating system is configured to automatically open inserted media, the computer's default web browser will access the third-party site when the CD is inserted, without requiring any further action by the user… the third-party site in question is currently -inactive- as a malware repository, so customers are not in immediate danger of having their computers compromised. However, if this third-party web site would become active as a malware repository again, there is a potential that users could infect their operating system by opening the CD with their web browser. All warranty CDs printed with "Revision -F0" (or later) do not contain references to the third-party website and do not introduce a potential to compromise customers' computers… Although there are no distinguishable markings on the CDs, all warranty CDs shipped in the period of December 2010 through August 2011 do contain a reference to the third-party site…" (More detail available at the Cisco URL above.)
___
Cisco Unified Communications Manager…
1. http://www.securitytracker.com/id/1025970
Aug 24 2011
CVE Reference: CVE-2011-2560, CVE-2011-2561, CVE-2011-2562, CVE-2011-2563, CVE-2011-2564
Impact: Denial of service via network
Version(s): 4.x, 6.x, 7.x, 8.x
Solution: The vendor has issued a fix (6.1(5)SU3, 7.1(5b)SU4, 8.0(3a)SU2, 8.5(1)SU2, 8.6(1))… available at: http://www.cisco.com/warp/public/707/cisco…0824-cucm.shtml
Cisco Unified Communications Manager…
2. http://www.securitytracker.com/id/1025971
Aug 24 2011
CVE Reference: CVE-2011-1643
Impact: Disclosure of authentication information, Disclosure of system information, Disclosure of user information
Version(s): 6.x, 7.x, 8.0, 8.5
Solution: The vendor has issued a fix. A patch matrix is available… at: http://www.cisco.com/warp/public/707/cisco…cucm-cups.shtml
CiscoWorks LAN Management Solution vuln
- http://www.cisco.com/warp/public/707/cisco…10914-lms.shtml
Revision 1.1 - Updated 2011 September 19
"Two vulnerabilities exist in CiscoWorks LAN Management Solution software that could allow an unauthenticated, remote attacker to execute arbitrary code on affected servers. Cisco has released free software updates that address these vulnerabilities. There are no workarounds available to mitigate these vulnerabilities… Both vulnerabilities are documented… and have been assigned CVE ID CVE-2011-2738…"
Cisco Unified Service Monitor and Cisco Unified Operations Manager vulns
- http://www.cisco.com/warp/public/707/cisco…0914-cusm.shtml
2011 September 14 - "Two vulnerabilities exist in Cisco Unified Service Monitor and Cisco Unified Operations Manager software that could allow an unauthenticated, remote attacker to execute arbitrary code on affected servers. Cisco has released free software updates that address these vulnerabilities. There are no workarounds available to mitigate these vulnerabilities… Both of these vulnerabilities are documented… and have been assigned CVE ID CVE-2011-2738…"
Cisco Nexus 5000 and 3000 Series Switches vuln
- http://www.cisco.com/warp/public/707/cisco…907-nexus.shtml
2011 September 07 - "A vulnerability exists in Cisco Nexus 5000 and 3000 Series Switches that may allow traffic to bypass deny statements in access control lists (ACLs) that are configured on the device. Cisco has released free software updates that address this vulnerability. A workaround is available to mitigate this vulnerability… This vulnerability is documented… and has been assigned CVE ID CVE-2011-2581…"
> http://web.nvd.nist.gov/view/vuln/detail?v…d=CVE-2011-2581
Original release date: 09/14/2011
Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services multiple vulns…
- http://www.cisco.com/warp/public/707/cisco…11005-asa.shtml
2011 October 05 - "… affected by multiple vulnerabilities as follows:
MSN Instant Messenger (IM) Inspection Denial of Service vulnerability
TACACS+ Authentication Bypass vulnerability
Four SunRPC Inspection Denial of Service vulnerabilities
Internet Locator Service (ILS) Inspection Denial of Service vulnerability…"
Cisco Firewall Services multiple vulns…
- http://www.cisco.com/warp/public/707/cisco…1005-fwsm.shtml
2011 October 05 - "… affected by the following vulnerabilities:
Syslog Message Memory Corruption Denial of Service Vulnerability
Authentication Proxy Denial of Service Vulnerability
TACACS+ Authentication Bypass Vulnerability
Sun Remote Procedure Call (SunRPC) Inspection Denial of Service Vulnerabilities
Internet Locator Server (ILS) Inspection Denial of Service Vulnerability…"
Cisco Network Admission Control Manager Directory Traversal vuln
- http://www.cisco.com/warp/public/707/cisco…11005-nac.shtml
2011 October 05 - "… directory traversal vulnerability that may allow an unauthenticated attacker to obtain system information. There are no workarounds to mitigate this vulnerability. Cisco has released free software updates that address this vulnerability…"
___
Cisco TelePresence Video Communication Svr vuln
- http://www.cisco.com/warp/public/707/cisco…11012-vcs.shtml
Release 2011 October 12
A vulnerability exists in Cisco TelePresence Video Communication Server (VCS) due to improper validation of user-controlled input to the web-based administrative interface. User-controlled input supplied to the login page via the HTTP User-Agent header is not properly sanitized for illegal or malicious content prior to being returned to the user in dynamically generated web content. A remote attacker could exploit this vulnerability to perform reflected cross-site scripting attacks…
Cisco TelePresence Video Communication Server Software versions earlier than X7.0 are affected. This vulnerability has been corrected in Cisco TelePresence Video Communication Server Software version X7.0… CVE-2011-3294…
- http://securitytracker.com/id/1026186
CVE Reference: CVE-2011-3294
Date: Oct 13 2011
Impact: Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user information
Fix Available: Yes Vendor Confirmed: Yes
Version: VCS prior to 7.0
Description: A vulnerability was reported in Cisco TelePresence Video Communication Server. A remote user can conduct cross-site scripting attacks…
___
Cisco IOS Smart Install vuln
- http://www.cisco.com/warp/public/707/cisco…t-install.shtml Revision 1.2
Last Updated 2011 October 11
Release 2011 September 28
Summary: A vulnerability exists in the Smart Install feature of Cisco Catalyst Switches running Cisco IOS Software that could allow an unauthenticated, remote attacker to perform remote code execution on the affected device. Cisco has released free software updates that address this vulnerability. There are no workarounds available to mitigate this vulnerability other than disabling the Smart Install feature…
___
Cisco IOS IP SLA vuln
- http://www.cisco.com/warp/public/707/cisco…928-ipsla.shtml Revision 1.2
Last Updated 2011 October 10
Release 2011 September 28
Summary: The Cisco IOS IP Service Level Agreement (IP SLA) feature contains a denial of service (DoS) vulnerability. The vulnerability is triggered when malformed UDP packets are sent to a vulnerable device. The vulnerable UDP port numbers depend on the device configuration. Default ports are not used for the vulnerable UDP IP SLA operation or for the UDP responder ports. Cisco has released free software updates that address this vulnerability…
CiscoWorks Common Services Arbitrary Command Execution Vulnerability
- http://tools.cisco.com/security/center/con…-sa-20111019-cs
October 19, 2011 - "CiscoWorks Common Services for Microsoft Windows contains a vulnerability that could allow an authenticated, remote attacker to execute arbitrary commands on the affected system with the privileges of a system administrator. Cisco has released free software updates that address this vulnerability. There are no workarounds that mitigate this vulnerability…"
- http://www.securitytracker.com/id/1026226
CVE Reference: CVE-2011-3310
Date: Oct 19 2011
Cisco Show and Share Security Vulnerabilities
- http://tools.cisco.com/security/center/con…sa-20111019-sns
October 19, 2011 - "The Cisco Show and Share webcasting and video sharing application contains two vulnerabilities. The first vulnerability allows an unauthenticated user to access several administrative web pages. The second vulnerability permits an authenticated user to execute arbitrary code on the device under the privileges of the web server user account. Cisco has released free software updates that address these vulnerabilities. There are no workarounds available for these vulnerabilities…"
- http://www.securitytracker.com/id/1026227
CVE Reference: CVE-2011-2584, CVE-2011-2585
Date: Oct 19 2011
- https://www.us-cert.gov/current/#cisco_rele…rity_advisories
October 19, 2011 - "… vulnerabilities affecting CiscoWorks Common Services and Cisco Show and Share. These vulnerabilities may allow an attacker to execute arbitrary code or bypass security restrictions…"
___
