CVE-2017-12262
HighSummary
A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauthenticated attacker to gain access to services only available on the internal network of the device. The issue is due to an incorrect firewall rule that may forward traffic from the public interface to the internal virtual network of the APIC-EM.
Risk Assessment
An attacker logically adjacent to the network could exploit this vulnerability to gain elevated privileges to services on the internal network, posing a significant security risk to the organization.
Recommendation
It is recommended to update devices to version 1.5 or later of the Cisco Application Policy Infrastructure Controller Enterprise Module and review the firewall configuration to eliminate incorrect rules.
Other vulnerabilities in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) przed wersją 1.5
See all- CVE-2016-1365High
The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter.
- CVE-2016-1386High
The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs.
Original NVD description (English source)
A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device. The vulnerability is due to an incorrect firewall rule on the device. The misconfiguration could allow traffic sent to the public interface of the device to be forwarded to the internal virtual network of the APIC-EM. An attacker that is logically adjacent to the network on which the public interface of the affected APIC-EM resides could leverage this behavior to gain access to services listening on the internal network with elevated privileges. This vulnerability affects appliances or virtual devices running Cisco Application Policy Infrastructure Controller Enterprise Module prior to version 1.5. Cisco Bug IDs: CSCve89638.