PT-2017-12516 · Cisco · Cisco Umbrella Insights Virtual Appliances

Publicado 2017-11-16 · Atualizado 2019-10-09 · CVE-2017-12350

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Umbrella Insights Virtual Appliances versions 2.1.0 and earlier

Description A vulnerability could allow an authenticated, local attacker to log in to an affected virtual appliance with root privileges due to the presence of default, static user credentials. An attacker could exploit this by using the hypervisor console to connect locally to an affected system and then using the static credentials to log in. A successful exploit could allow the attacker to log in to the affected appliance with root privileges.

Recommendations For Cisco Umbrella Insights Virtual Appliances versions 2.1.0 and earlier, update to a version later than 2.1.0 to resolve the issue. As a temporary workaround, consider changing the default, static user credentials to prevent unauthorized access. Restrict access to the hypervisor console to minimize the risk of exploitation.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2017-12350

Produtos afetados

Cisco Umbrella Insights Virtual Appliances

Referências · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-uva · Aviso do Fabricante
• https://info-sec.ca/advisories/Cisco-Umbrella-Hardcoded-Credentials.html · Nota
• https://osv.dev/vulnerability/CVE-2017-12350 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-12350 · Nota de Segurança
• http://securityfocus.com/bid/101879 · Nota