多款Cisco产品Apache Commons Collections库任意代码执行漏洞

admin

0
文章

0
评论

2022-07-12 07:34:25 CNNVD漏洞来源：ZONE.CI 全球网 0 阅读模式

漏洞信息详情

多款Cisco产品Apache Commons Collections库任意代码执行漏洞

CNNVD编号：CNNVD-201512-420
危害等级：超危
CVE编号： CVE-2015-6420
漏洞类型：代码问题
发布时间： 2015-12-15
威胁类型：远程
更新时间： 2021-05-28
厂商： apache
漏洞来源： The Cisco Product ...

漏洞简介

Apache Commons Collections（ACC）是美国阿帕奇（Apache）软件基金会的一个Apache Commons项目的Commons Proper（可重复利用Java组件库）中的组件，它可以扩展或增加Java集合框架。

多款Cisco产品的ACC库中使用的Java反序列化过程中存在安全漏洞。远程攻击者可通过提交特制的输入利用该漏洞执行任意代码。以下产品及版本受到影响：Cisco Digital Life RMS 1.8.1.1版本，Broadband Access Center Telco Wireless 3.8.1版本；SocialMiner，WebEx Meetings Server 1.x版本，2.x版本；NAC Agent for Windows；InTracer，Network Admission Control (NAC)，Visual Quality Experience Server，Visual Quality Experience Tools Server；ASA CX and Cisco Prime Security Manager，Clean Access Manager，NAC Appliance (Clean Access Server)，NAC Guest Server，NAC Server，Secure Access Control System (ACS)；Access Registrar Appliance，Cloupia Unified Infrastructure Controller，Configuration Professional，Digital Media Manager，Insight Reporter，Prime Access Registrar Appliance，Prime Access Registrar，Prime Collaboration Provisioning，Prime Home，Prime LAN Management Solution (LMS - Solaris)，Prime Optical for SPs，Prime Performance Manager，Prime Provisioning for SPs，Prime Provisioning，Prime Service Catalog Virtual Appliance，Security Manager，Data Center Analytics Framework (DCAF)；Broadband Access Center Telco Wireless；Computer Telephony Integration Object Server (CTiOS)，Hosted Collaboration Mediation Fulfillment，IM and Presence Service (CUPS)，IP Interoperability and Collaboration System (IPICS)，Management Heartbeat Server，MediaSense，MeetingPlace，Unified Communications Manager (UCM)，Unified Communications Manager Session Management Edition (SME)，Unified Contact Center Enterprise，Unified Intelligence Center，Unified Intelligent Contact Management Enterprise，Unified Sip Proxy；Media Experience Engines (MXE)，Show and Share，TelePresence Exchange System (CTX)，Videoscape Conductor；Business Video Services Automation Software (BV)，Cloud Email Security，Registered Envelope Service (CRES)，Unified Services Delivery Platform (CUSDP)，Communication/Collaboration Sizing Tool, Virtue Machine Placement Tool，Unified Communications Upgrade Readiness Assessment，DCAF UCS Collector，Network Change and Configuration Management，Partner Supporting Service (PSS) 1.x版本，SI component of Partner Supporting Service，Serial Number Assessment Service (SNAS)，Smart Net Total Care (SNTC)。