Posts tagged: Cisco

A flaw in how Cisco IOS XR checks .iso install files lets someone who already has root-system access load unsigned software, quietly defeating the image signature check.

On several IOS XR platforms, ACLs applied to the management interface silently fail to restrict SSH, NETCONF or gRPC, so anyone who can reach that interface can reach those services regardless of the filter you configured.

An authenticated attacker holding Config Managers credentials on Cisco EPNM can push arbitrary files onto the system via a flawed API endpoint, with no workaround available short of upgrading to 8.1.

A flaw in the web management API of Cisco EPNM and Prime Infrastructure lets any logged-in, low-privileged user pull configuration data they shouldn’t be able to see.

A stored XSS bug in Cisco EPNM and Prime Infrastructure lets an already-authenticated admin plant script in management interface data fields that later runs in another admin’s browser session.

A stored input-validation flaw in Cisco Unified CM IM&P’s admin web interface lets an attacker run script in a user’s browser session if that user clicks a crafted link.

Cisco Webex Meetings failed to properly validate URLs in meeting-join links, letting an unauthenticated attacker craft links that send users to an untrusted site instead of the genuine Webex page.

An authenticated user tricked into clicking a crafted link could trigger script execution in another Webex Meetings user’s session, but Cisco has already fixed this server-side with nothing for customers to patch.

Cisco’s Unified Communications Manager admin web interface lacks proper CSRF protection, letting an attacker trick a logged-in administrator into unknowingly executing actions on the call-management system.

An admin-only backup restore flaw in Cisco Nexus Dashboard lets someone with valid Administrator credentials plant a crafted backup file that escalates them to root on the underlying host.