PT-2020-4617 · Cisco · Cisco Xcp Authentication Service+1

Published 2020-11-04 · Updated 2020-11-20 · CVE-2020-27121

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) Software (affected versions not specified)

Description A vulnerability in the software could allow an authenticated, remote attacker to cause the Cisco XCP Authentication Service on an affected device to restart, resulting in a denial of service (DoS) condition. The issue is due to improper handling of login requests. An attacker could exploit this by sending a crafted client login request to an affected device, potentially causing a process to crash and resulting in a DoS condition for new login attempts. Users who are authenticated at the time of the attack would not be affected.

Recommendations As a temporary workaround, consider implementing workarounds that address this vulnerability to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-248

CWE-755

Related Identifiers

BDU:2020-05166

CVE-2020-27121

Affected Products

Cisco Unified Communications Manager Im & Presence Service

Cisco Xcp Authentication Service

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-27121 · Security Note
• https://bdu.fstec.ru/vul/2020-05166 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-dos-uTx2dqu2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-27121 · Vendor Advisory
• https://t.me/cvenotify/5914 · Telegram Post