PT-2010-5412 · Cisco · Cisco Unified Videoconferencing 3515 Multipoint Control Unit+3

Published 2010-11-22 · Updated 2010-11-30 · CVE-2010-4304

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Unified Videoconferencing System versions (affected versions not specified) Cisco Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway (affected versions not specified) Cisco Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway (affected versions not specified) Cisco Unified Videoconferencing 3515 Multipoint Control Unit (MCU) (affected versions not specified)

Description The issue concerns the web interface of various Cisco Unified Videoconferencing products, which generates predictable session IDs based on time values. This predictability makes it easier for remote attackers to hijack sessions via a brute-force attack.

Recommendations For Cisco Unified Videoconferencing System, consider implementing additional security measures to protect against session hijacking until a fix is available. For Cisco Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway, restrict access to the web interface to minimize the risk of exploitation. For Cisco Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway, avoid using the web interface for sensitive operations until the issue is resolved. For Cisco Unified Videoconferencing 3515 Multipoint Control Unit (MCU), consider disabling the web interface as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2010-4304

Affected Products

Cisco Unified Videoconferencing 3515 Multipoint Control Unit

Cisco Unified Videoconferencing 3522 Basic Rate Interfaces (Bri) Gateway

Cisco Unified Videoconferencing 3527 Primary Rate Interface (Pri) Gateway

Cisco Unified Videoconferencing System

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-4304 · Security Note
• http://cisco.com/en/US/products/products_security_response09186a0080b56d0d.html · Vendor Advisory
• http://trustmatta.com/advisories/MATTA-2010-001.txt · Note
• http://seclists.org/fulldisclosure/2010/Nov/167 · Note