PT-2019-2788 · Cisco+1 · Cisco Findit Network Probe+2

Publicado 2019-07-17 · Atualizado 2019-10-09 · CVE-2019-1919

Positive Technologies (AI Summary)

CVSS v3.1

8.4

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco FindIT Network Management versions 1.1.4 Cisco FindIT Network Probe versions 1.1.4

Description The issue is related to the use of pre-installed credentials in virtual machine images. An attacker could exploit this to gain elevated privileges. The vulnerability is due to the presence of an account with static credentials in the underlying Linux operating system. This could allow an unauthenticated, local attacker to log in to the device with root privileges by accessing the VM console and using the static account.

Recommendations For Cisco FindIT Network Management version 1.1.4, consider changing the static credentials of the pre-installed account to prevent unauthorized access. For Cisco FindIT Network Probe version 1.1.4, change the static credentials of the pre-installed account to minimize the risk of exploitation.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2019-02740

CVE-2019-1919

Produtos afetados

Cisco Findit Network Management

Cisco Findit Network Probe

Linux

Referências · 6

• https://securityfocus.com/bid/109305 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-cfnm-statcred · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-1919 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-02740 · Nota de Segurança
• http://securityfocus.com/bid/109305 · Nota
• https://osv.dev/vulnerability/CVE-2019-1919 · Aviso do Fabricante