Researcher Discloses Critical Flaws In Cisco Security Manager (CSM)

guest · Nov 17, 2020

Researcher Discloses Critical RCE Flaws In Cisco Security Manager
November 16, 2020
https://thehackernews.com/2020/11/researcher-discloses-critical-rce-flaws.html

Cisco has published multiple security advisories concerning critical flaws in Cisco Security Manager (CSM) a week after the networking equipment maker quietly released patches with version 4.22 of the platform.

The development comes after Code White researcher Florian Hauser (frycos) yesterday publicly disclosed proof-of-concept (PoC) code for as many as 12 security vulnerabilities affecting the web interface of CSM that makes it possible for an unauthenticated attacker to achieve remote code execution (RCE) attacks.
The flaws were responsibly reported to Cisco's Product Security Incident Response Team (PSIRT) three months ago, on July 13.

Cisco Security Manager is an end-to-end enterprise solution that allows organizations to enforce access policies and manage and configure firewalls and intrusion prevention systems in a network.
Click to expand...

The vulnerabilities allow an attacker to craft malicious requests as well as upload and download arbitrary files in the context of the highest-privilege user account "NT AUTHORITY\SYSTEM," giving the adversary access to all files in a specific directory.

The flaw has a CVSS score of 9.1 out of 10, making it critical in severity.
A separate flaw (CVSS score: 8.1) [...]
Click to expand...

guest · Nov 17, 2020

Cisco Releases Security Updates for Security Manager
November 17, 2020
https://us-cert.cisa.gov/ncas/curre...co-releases-security-updates-security-manager

Cisco has released security updates to address vulnerabilities in Cisco Security Manager. A remote attacker could exploit these vulnerabilities to obtain sensitive information.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the following Cisco Security Advisories and apply the necessary updates.

Cisco Security Manager Path Traversal Vulnerability cisco-sa-csm-path-trav-NgeRnqgR

Cisco Security Manager Static Credential Vulnerability cisco-sa-csm-rce-8gjUz9fW

Click to expand...

guest · Dec 7, 2020

Cisco fixes Security Manager vulnerabilities with public exploits
December 7, 2020
https://www.bleepingcomputer.com/ne...manager-vulnerabilities-with-public-exploits/

Cisco has released security updates to address multiple pre-authentication vulnerabilities with public exploits affecting Cisco Security Manager that could allow for remote code execution after successful exploitation.
Proof-of-concept exploits available since November

"The Cisco Product Security Incident Response Team (PSIRT) is aware of public announcements about these vulnerabilities," the advisory says.
These vulnerabilities impact Cisco Security Manager releases 4.22 and earlier and they were disclosed by Cisco on November 16, after being reported by Code White security researcher Florian Hauser in August.
Click to expand...

Security updates available
Cisco addressed two of the 12 vulnerabilities (CVE-2020-27125 and CVE-2020-27130) but didn't provide any security updates to fix multiple security bugs, collectively tracked as CVE-2020-27131.

The vulnerabilities were found by Hauser in the Java deserialization function in Cisco Security Manager and are caused by "insecure deserialization of user-supplied content by the affected software."

Cisco released the missing patches for CVE-2020-27131 in Servicepack 4.22SP1. Patch now!
— frycos (@frycos) December 7, 2020
Click to expand...

Log in or Sign up

Researcher Discloses Critical Flaws In Cisco Security Manager (CSM)

guest Guest

guest Guest

guest Guest

Log in or Sign up

Researcher Discloses Critical Flaws In Cisco Security Manager (CSM)

guest Guest

guest Guest

guest Guest

Useful Searches