PT-2018-1847 · Cisco · Cisco Unity Express

Publicado 2018-11-07 · Atualizado 2019-10-09 · CVE-2018-15381

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Unity Express (affected versions not specified)

Description The issue is related to a Java deserialization vulnerability. It occurs when the software insecurely deserializes user-supplied content, specifically Java objects, through the Java Remote Method Invocation (RMI) service. This could allow a remote attacker to execute arbitrary shell commands with the privileges of the root user. The attacker could exploit this by sending a malicious serialized Java object to the RMI service.

Recommendations For Cisco Unity Express, consider disabling the Java RMI service until a patch is available to prevent exploitation. Restrict access to the Java deserialization functionality to minimize the risk of arbitrary command execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

BDU:2018-01449

CVE-2018-15381

Produtos afetados

Cisco Unity Express

Referências · 6

• http://securityfocus.com/bid/105876 · Nota
• http://securitytracker.com/id/1042130 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-15381 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-cue · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-15381 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2018-01449 · Nota de Segurança