| Title | 複数のシスコシステムズ製品における脆弱性 |
|---|---|
| Summary | broadworks application delivery platform、Cisco BroadWorks Application Server、Cisco BroadWorks Database Server 等複数のシスコシステムズ製品には、不特定の脆弱性が存在します。 |
| Possible impacts | 情報を取得される、および情報を改ざんされる可能性があります。 |
| Solution | ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date | July 5, 2023, midnight |
| Registration Date | Jan. 26, 2024, 2:59 p.m. |
| Last Update | Jan. 26, 2024, 2:59 p.m. |
| CVSS3.0 : 警告 | |
| Score | 6 |
|---|---|
| Vector | CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N |
| シスコシステムズ |
| Cisco BroadWorks Application Delivery Platform 23.0 |
| Cisco BroadWorks Application Delivery Platform 24.0 |
| Cisco BroadWorks Application Delivery Platform 25.0 |
| Cisco BroadWorks Application Server 23.0 |
| Cisco BroadWorks Application Server 24.0 |
| Cisco BroadWorks Application Server 25.0 |
| Cisco BroadWorks Database Server 23.0 |
| Cisco BroadWorks Database Server 24.0 |
| Cisco BroadWorks Database Server 25.0 |
| Cisco BroadWorks Database Troubleshooting Server 23.0 |
| Cisco BroadWorks Database Troubleshooting Server 24.0 |
| Cisco BroadWorks Database Troubleshooting Server 25.0 |
| Cisco BroadWorks Execution Server 23.0 |
| Cisco BroadWorks Execution Server 24.0 |
| Cisco BroadWorks Execution Server 25.0 |
| Cisco BroadWorks Media Server 23.0 |
| Cisco BroadWorks Media Server 24.0 |
| Cisco BroadWorks Media Server 25.0 |
| Cisco BroadWorks Messaging Server 23.0 |
| Cisco BroadWorks Messaging Server 24.0 |
| Cisco BroadWorks Messaging Server 25.0 |
| Cisco BroadWorks Network Database Server 23.0 |
| Cisco BroadWorks Network Database Server 24.0 |
| Cisco BroadWorks Network Database Server 25.0 |
| Cisco BroadWorks Network Function Manager 23.0 |
| Cisco BroadWorks Network Function Manager 24.0 |
| Cisco BroadWorks Network Function Manager 25.0 |
| Cisco BroadWorks Network Server 23.0 |
| Cisco BroadWorks Network Server 24.0 |
| Cisco BroadWorks Network Server 25.0 |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2024年01月26日] 掲載 |
Jan. 26, 2024, 2:59 p.m. |
| Summary | A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device. The vulnerability is due to insufficient input validation by the operating system CLI. An attacker could exploit this vulnerability by issuing a crafted command to the affected system. A successful exploit could allow the attacker to execute commands as the root user. To exploit this vulnerability, an attacker must have valid BroadWorks administrative privileges on the affected device. |
|---|---|
| Publication Date | July 12, 2023, 11:15 p.m. |
| Registration Date | July 13, 2023, 10 a.m. |
| Last Update | Nov. 21, 2024, 4:40 p.m. |
| Configuration1 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_application_delivery_platform_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_application_delivery_platform_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_application_delivery_platform_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_application_delivery_platform:-:*:*:*:*:*:*:* | ||||
| Configuration2 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_application_server_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_application_server_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_application_server_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_application_server:-:*:*:*:*:*:*:* | ||||
| Configuration3 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_database_server_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_database_server_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_database_server_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_database_server:-:*:*:*:*:*:*:* | ||||
| Configuration4 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_database_troubleshooting_server_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_database_troubleshooting_server_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_database_troubleshooting_server_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_database_troubleshooting_server:-:*:*:*:*:*:*:* | ||||
| Configuration5 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_execution_server_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_execution_server_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_execution_server_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_execution_server:-:*:*:*:*:*:*:* | ||||
| Configuration6 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_media_server_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_media_server_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_media_server_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_media_server:-:*:*:*:*:*:*:* | ||||
| Configuration7 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_messaging_server_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_messaging_server_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_messaging_server_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_messaging_server:-:*:*:*:*:*:*:* | ||||
| Configuration8 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_network_database_server_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_network_database_server_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_network_database_server_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_network_database_server:-:*:*:*:*:*:*:* | ||||
| Configuration9 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_network_function_manager_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_network_function_manager_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_network_function_manager_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_network_function_manager:-:*:*:*:*:*:*:* | ||||
| Configuration10 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_network_server_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_network_server_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_network_server_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_network_server:-:*:*:*:*:*:*:* | ||||
| Configuration11 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_profile_server_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_profile_server_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_profile_server_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_profile_server:-:*:*:*:*:*:*:* | ||||
| Configuration12 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_service_control_function_server_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_service_control_function_server_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_service_control_function_server_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_service_control_function_server:-:*:*:*:*:*:*:* | ||||
| Configuration13 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_sharing_server_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_sharing_server_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_sharing_server_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_sharing_server:-:*:*:*:*:*:*:* | ||||
| Configuration14 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_video_server_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_video_server_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_video_server_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_video_server:-:*:*:*:*:*:*:* | ||||
| Configuration15 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_webrtc_server_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_webrtc_server_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_webrtc_server_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_webrtc_server:-:*:*:*:*:*:*:* | ||||
| Configuration16 | or higher | or less | more than | less than | |
| cpe:2.3:o:cisco:broadworks_xtended_services_platform_firmware:23.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_xtended_services_platform_firmware:24.0:*:*:*:*:*:*:* | |||||
| cpe:2.3:o:cisco:broadworks_xtended_services_platform_firmware:25.0:*:*:*:*:*:*:* | |||||
| execution environment | |||||
| 1 | cpe:2.3:h:cisco:broadworks_xtended_services_platform:-:*:*:*:*:*:*:* | ||||