{"id":108622,"date":"2023-05-18T12:48:16","date_gmt":"2023-05-18T10:48:16","guid":{"rendered":"https:\/\/prohoster.info\/?p=108622"},"modified":"2023-05-18T19:55:48","modified_gmt":"2023-05-18T17:55:48","slug":"kriticheskie-uyazvimosti-v-kommutatorah-cisco-serii-small-business","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/kriticheskie-uyazvimosti-v-kommutatorah-cisco-serii-small-business","title":{"rendered":"Vulnerabilit\u0103\u021bi critice \u00een switch-urile Cisco din seria Small Business","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen comutatoarele Cisco din seria Small Business au fost descoperite 4 vulnerabilit\u0103\u021bi, permi\u021b\u00e2nd unui atacator de la distan\u021b\u0103 s\u0103 ob\u021bin\u0103 acces complet la dispozitiv cu privilegii de root, f\u0103r\u0103 a trece printr-o autentificare. Pentru a exploata problemele, atacatorul trebuie s\u0103 aib\u0103 capacitatea de a trimite cereri c\u0103tre portul de re\u021bea care asigur\u0103 func\u021bionarea interfe\u021bei web. Vulnerabilit\u0103\u021bilor le-a fost atribuit un nivel de gravitate critic (9.8 din 10). Exist\u0103 rapoarte despre un prototip de exploatate func\u021bional. <\/p>\n

Vulnerabilit\u0103\u021bile identificate (CVE-2023-20159, CVE-2023-20160, CVE-2023-20161, CVE-2023-20189) sunt cauzate de erori \u00een gestionarea memoriei \u00een diverse handler-uri disponibile \u00een stadiul anterior autentific\u0103rii. Aceste vulnerabilit\u0103\u021bi pot provoca un overflow de buffer \u00een timpul proces\u0103rii unor date externe formulate \u00een mod special. \u00cen plus, seria Cisco Small Business a identificat patru vulnerabilit\u0103\u021bi mai pu\u021bin periculoase (CVE-2023-20024, CVE-2023-20156, CVE-2023-20157, CVE-2023-20158), care permit ini\u021bierea de la distan\u021b\u0103 a unui atac de tip denial of service, \u0219i o vulnerabilitate (CVE-2023-20162) care faciliteaz\u0103 ob\u021binerea informa\u021biilor despre configura\u021bia dispozitivului f\u0103r\u0103 autentificare. <\/p>\n

Vulnerabilit\u0103\u021bile afecteaz\u0103 seriile Smart Switch 250, 350, 350X, 550X, Business 250 \u0219i Business 350, precum \u0219i seriile Small Business 200, 300 \u0219i 500. \u00cen comutatoarele din seria 220 \u0219i Business 220, vulnerabilitatea nu se manifest\u0103. Problemele au fost remediate \u00een actualiz\u0103rile firmware 2.5.9.16 \u0219i 3.3.0.16. Actualiz\u0103rile firmware pentru seriile Small Business 200, 300 \u0219i 500 nu vor fi generate, deoarece ciclul de via\u021b\u0103 al acestor modele s-a \u00eencheiat.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Cisco \u0441\u0435\u0440\u0438\u0438 Small Business \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0435\u0437 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root. \u0414\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u043e\u0440\u0442, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0440\u0430\u0431\u043e\u0442\u0443 web-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (9.8 \u0438\u0437 10). \u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430. \u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-20159, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-108622","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilit\u0103\u021bi critice \u00een comutatoarele Cisco din seria Small Business | ProHoster","description":"\u00cen comutatoarele Cisco din seria Small Business au fost descoperite 4 vulnerabilit\u0103\u021bi, permi\u021b\u00e2nd unui atacator de la distan\u021b\u0103 s\u0103 ob\u021bin\u0103 acces complet la dispozitiv cu privilegii de root, f\u0103r\u0103 a trece printr-o autentificare.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/kriticheskie-uyazvimosti-v-kommutatorah-cisco-serii-small-business","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Cisco \u0441\u0435\u0440\u0438\u0438 Small Business | ProHoster","og:description":"\u0412 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Cisco \u0441\u0435\u0440\u0438\u0438 Small Business \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0435\u0437 \u043f\u0440\u043e\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/kriticheskie-uyazvimosti-v-kommutatorah-cisco-serii-small-business","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-05-18T10:48:16+00:00","article:modified_time":"2023-05-18T17:55:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/108622","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=108622"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/108622\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=108622"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=108622"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=108622"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}