PT-2017-1788 · Cisco · Unified Computing System (Ucs) B-Series M3+3

Publicado 2017-04-07 · Atualizado 2017-07-12 · CVE-2017-6604

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System Central versions 3.1(2c)B Cisco Integrated Management Controller (IMC) Software versions 3.1(2c)B

Description The issue is related to an open redirect vulnerability in the web interface of the affected systems. This could allow a remote attacker to redirect users to a malicious web page. The vulnerability affects various Cisco products, including Unified Computing System (UCS) B-Series M3 and M4 Blade Servers and Unified Computing System (UCS) C-Series M3 and M4 Rack Servers.

Recommendations For versions 3.1(2c)B, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the web interface to minimize the risk of exploitation.

Correção

Open Redirect

Enumeração de Fraquezas

CWE-601

Identificadores relacionados

BDU:2017-00944

CVE-2017-6604

Produtos afetados

Cisco Integrated Management Controller (Imc)

Cisco Unified Computing System Central

Unified Computing System (Ucs) B-Series M3

Unified Computing System (Ucs) B-Series M4

Referências · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170405-cimc · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6604 · Nota de Segurança
• https://bdu.fstec.ru/vul/2017-00944 · Nota de Segurança
• http://securityfocus.com/bid/97457 · Nota
• http://securitytracker.com/id/1038186 · Nota
• https://osv.dev/vulnerability/CVE-2017-6604 · Aviso do Fabricante