Cisco Products Multiple Vulnerabilities

Last Update Date: 29 Jan 2014 18:44 Release Date: 29 Jan 2014 3746 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities have been identified in Cisco products, which can be exploited by attackers to conduct cross-site scripting attacks, access the target database, execute commands without proper authorization, cause denial of service conditions, and gain elevated privileges on the target system.

Impact

Cross-Site Scripting
Denial of Service
Elevation of Privilege
Remote Code Execution
Security Restriction Bypass
Information Disclosure

System / Technologies affected

Cisco Video Surveillance 5000 Series HD IP Dome Camera
Cisco Video Surveillance Operations Manager
Cisco NX-OS
Cisco Secure Access Control Server

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor's advisory is available at:
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0673
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0674
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0676
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0677
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0678

Cisco Products Multiple Vulnerabilities

Impact

System / Technologies affected

Solutions

Vulnerability Identifier

Source

Related Link