PT-2013-2905 · Cisco · Cisco Prime Central For Hosted Collaboration Solution (Hcs) Assurance

Publicado 2013-02-27 · Atualizado 2013-03-23 · CVE-2013-1135

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance versions 8.6 through 9.0

Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and monitoring outage, via malformed TLS messages to TCP port 9043 or 9443.

Recommendations For versions 8.6 through 9.0, consider restricting access to TCP ports 9043 and 9443 to minimize the risk of exploitation. As a temporary workaround, monitor system resources closely for signs of CPU consumption and consider implementing additional monitoring to detect potential outages. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-1135

Produtos afetados

Cisco Prime Central For Hosted Collaboration Solution (Hcs) Assurance

Referências · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130227-hcs · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-1135 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1135 · Aviso do Fabricante