{"id":51611,"date":"2023-04-21T20:55:00","date_gmt":"2023-04-21T20:55:00","guid":{"rendered":"https:\/\/www.csoonline.com\/article\/3694192\/cisco-patches-high-and-critical-flaws-across-several-products.html#tk.rss_security"},"modified":"2023-04-21T20:55:00","modified_gmt":"2023-04-21T20:55:00","slug":"cisco-patches-high-and-critical-flaws-across-several-products","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cisco-patches-high-and-critical-flaws-across-several-products\/","title":{"rendered":"Cisco patches high and critical flaws across several products"},"content":{"rendered":"
<\/div>\n

Cisco fixed serious vulnerabilities across several of its products this week, including in its Industrial Network Director, Modeling Labs, ASR 5000 Series Routers, and BroadWorks Network Server. The flaws can lead to administrative command injection, authentication bypass, remote privilege escalation and denial of service.<\/p>\n

The Cisco Industrial Network Director (IND), a network monitoring and management server for operational technology (OT) networks, received patches for two vulnerabilities<\/a> rated critical and medium respectively. These were fixed in version 1.11.3 of the software.<\/p>\n

The critical flaw, CVE-2023-20036, is in the web-based user interface of Cisco IND and could allow authenticated remote attackers to execute arbitrary commands on the underlying Windows operating system with administrative privileges (\u200b\u200bNT AUTHORITY\\SYSTEM). The vulnerability is the result of insufficient input validation in the functionality that allows users to upload Device Packs.<\/p>\n

The medium-risk flaw fixed in Cisco IND, CVE-2023-20039, is the result of insufficiently strong file permissions by default on the application data directory. A successful exploit could allow an authenticated attacker to access sensitive information and files from this directory.<\/p>\n

Cisco Modeling Labs flaw could allow for unauthorized remote access<\/h2>\n

Cisco Modeling Labs, an on-premise network simulation tool, has a critical vulnerability (CVE-2023-20154)<\/a> that results from processing certain messages from an external LDAP authentication server, which could allow an unauthenticated remote attacker to gain access to the tool’s web interface with administrative privileges. This would give them access to view and modify all simulations and user-created data.<\/p>\n

The flaw impacts Modeling Labs for Education, Modeling Labs Enterprise and Modeling Labs – Not For Resale, but not Modeling Labs Personal and Personal Plus. It can only be exploited if the external LDAP server is configured in a way that it responds to search queries with a non-empty array of matching entries. The configuration of the LDAP server can be changed by an administrator to mitigate this flaw as a temporary workaround, but customers are advised to upgrade Modeling Labs to version 2.5.1 to fix the vulnerability.<\/p>\n