PT-2013-6217 · Cisco · Cisco Ios Xe
Published
2013-12-23
·
Updated
2017-08-29
·
CVE-2013-6979
CVSS v2.0
5.4
Medium
| Vector | AV:N/AC:H/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Cisco IOS XE versions 03.02.xxSE through 03.03.xxSE
Description
The issue arises from the VTY authentication implementation in Cisco IOS XE, which incorrectly relies on the Linux-IOS internal-network configuration. This allows remote attackers to bypass authentication if they have access to a 192.168.x.2 source IP address. The vulnerability is due to incomplete validations of the Linux-IOS Internal Network interface, enabling an unauthenticated, remote attacker to access an affected device without authentication and perform actions with the privileges configured for the vty line interface. The attacker must have their source address in the 192.168.x.2 subnet and have IP communication to the Cisco IOS XE device to exploit this vulnerability. It is likely that an attacker would need access to trusted, internal networks to communicate with the targeted device, limiting the likelihood of a successful exploit.
Recommendations
For Cisco IOS XE versions 03.02.xxSE through 03.03.xxSE, update to a newer version that includes the fix for this issue, as confirmed by Cisco in their security notice.
As a temporary workaround, consider restricting access to the vty line interface to minimize the risk of exploitation.
Fix
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco Ios Xe