PT-2013-2905 · Cisco · Cisco Prime Central For Hosted Collaboration Solution (Hcs) Assurance

Published 2013-02-27 · Updated 2013-03-23 · CVE-2013-1135

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance versions 8.6 through 9.0

Description The issue allows remote attackers to cause a denial of service, resulting in CPU consumption and monitoring outage, via malformed TLS messages to TCP port 9043 or 9443.

Recommendations For versions 8.6 through 9.0, consider restricting access to TCP ports 9043 and 9443 to minimize the risk of exploitation. As a temporary workaround, monitor system resources closely for signs of CPU consumption and consider implementing additional monitoring to detect potential outages. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-1135

Affected Products

Cisco Prime Central For Hosted Collaboration Solution (Hcs) Assurance

References · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130227-hcs · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1135 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1135 · Vendor Advisory