漏洞信息详情

多款Cisco产品授权问题漏洞

• CNNVD编号：CNNVD-201711-660
• 危害等级： 超危
  
• CVE编号： CVE-2017-12337
• 漏洞类型： 授权问题
• 发布时间： 2017-12-11
• 威胁类型： 远程
• 更新时间： 2019-10-17
• 厂        商： cisco
• 漏洞来源：

漏洞简介

Cisco Voice Operating System是美国思科（Cisco）公司的一套语音操作系统。Cisco Unified Communications Manager（UCM）等都是基于Cisco Voice Operating System平台的产品。Cisco Unified Communications Manager（UCM）是一款统一通信系统中的呼叫处理组件。Unified Communication Manager Session Management Edition（SME）是它的会话管理版。

基于Cisco Voice Operating System的多款Cisco产品中的更新机制存在安全漏洞。远程攻击者可利用该漏洞获取提升的访问权限。以下产品受到影响：Cisco Unified Communications Manager (UCM)；Unified Communication Manager Session Management Edition (SME)；Emergency Responder；Unity ConnectionCisco Unified Communications Manager IM and Presence Service (IMP，前称：Cisco Unified Presence)；Prime License Manager；Hosted Collaboration Mediation Fulfillment；Unified Contact Center Express (UCCx)；SocialMiner；Unified Intelligence Center (UIC)；Finesse；MediaSense。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-vos

参考网址

来源:SECTRACK

链接:http://www.securitytracker.com/id/1039818

来源:SECTRACK

链接:http://www.securitytracker.com/id/1039819

来源:SECTRACK

链接:http://www.securitytracker.com/id/1039816

来源:SECTRACK

链接:http://www.securitytracker.com/id/1039817

来源:SECTRACK

链接:http://www.securitytracker.com/id/1039814

来源:SECTRACK

链接:http://www.securitytracker.com/id/1039815

来源:CONFIRM

链接:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20171115-vos

来源:SECTRACK

链接:http://www.securitytracker.com/id/1039813

来源:SECTRACK

链接:http://www.securitytracker.com/id/1039820

来源:BID

链接:https://www.securityfocus.com/bid/101865

受影响实体

• Cisco Unified_intelligence_center:-  
• Cisco Unity_connection:-  
• Cisco Unified_contact_center_express:-  
• Cisco Unified_communications_manager_im_and_presence_service:-  
• Cisco Unified_communications_manager:-:~~Session_management~~~  

补丁

• 多款Cisco产品授权问题漏洞的修复措施