PT-2013-5603 · Cisco · Cisco Ios

Publicado 2013-10-25 · Atualizado 2013-10-25 · CVE-2013-5522

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS on Catalyst 3750X switches (affected versions not specified)

Description A vulnerability exists due to default Service Module credentials, allowing local users to gain privileges via a Service Module login. This issue makes it easier for an authenticated, local attacker to gain root access to the kernel running on the Cisco Service Module by logging in using the default credentials. An exploit could allow the attacker to take complete control of the operating system running on the service module. The vulnerability can be exploited by an attacker with local access to a targeted device, which may reside on trusted, internal networks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-5522

Produtos afetados

Cisco Ios

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-5522 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5522 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20131025-CVE-2013-5522 · Nota