PT-2017-12516 · Cisco · Cisco Umbrella Insights Virtual Appliances

Published 2017-11-16 · Updated 2019-10-09 · CVE-2017-12350

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Umbrella Insights Virtual Appliances versions 2.1.0 and earlier

Description A vulnerability could allow an authenticated, local attacker to log in to an affected virtual appliance with root privileges due to the presence of default, static user credentials. An attacker could exploit this by using the hypervisor console to connect locally to an affected system and then using the static credentials to log in. A successful exploit could allow the attacker to log in to the affected appliance with root privileges.

Recommendations For Cisco Umbrella Insights Virtual Appliances versions 2.1.0 and earlier, update to a version later than 2.1.0 to resolve the issue. As a temporary workaround, consider changing the default, static user credentials to prevent unauthorized access. Restrict access to the hypervisor console to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2017-12350

Affected Products

Cisco Umbrella Insights Virtual Appliances

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-uva · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-12350 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-12350 · Security Note
• https://info-sec.ca/advisories/Cisco-Umbrella-Hardcoded-Credentials.html · Note
• http://securityfocus.com/bid/101879 · Note