Cisco製品

ソフト名：Cisco NX-OS 4.2.x未満 (Cisco MDS 9000 Series, Cisco Nexus 7000 Series Switches), Cisco Wireless Control System (WCS), Cisco TelePresence Video Communication Server (VCS), Cisco Video Surveillance Manager (VSM), Cisco Video Surveillance Operations Manager (VSOM)

回避策：4.2.x以降へのアップデートにて対応, 未対応

脆弱性：DoS攻撃, 不正HTTPのリクエスト, メモリの浪費

ソース：

http://www.cisco.com/en/US/products/ps9372/

tsd_products_support_series_home.html

http://www.cisco.com/en/US/products/ps6305/

http://www.cisco.com/warp/public/707/cisco-sa-20110830-apache.shtml

http://secunia.com/advisories/45606/

http://secunia.com/advisories/45771/

http://secunia.com/advisories/45850/

http://secunia.com/advisories/45851/

http://dvw-j.blogspot.com/2011/08/apache.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192

CVE：CVE-2011-3192

危険性：Medium Risk

Cisco製品

ソフト名：Cisco Unified Videoconferencing 3515 Multipoint Control Unit (MCU), Cisco Unified Videoconferencing 3522 Basic Rate Interfaces (BRI) Gateway, Cisco Unified Videoconferencing 3527 Primary Rate Interface (PRI) Gateway, Cisco Unified Videoconferencing 3545 System/5110 System/5115 System/5230 System
回避策：cisco-sr-20101117-cuvcにて対応
脆弱性：不可変のユーザー名とパスワードの包含, リモートコマンド実行, セキュリティの強度不足, 機密情報の奪取, 不正アクセス, ユーザーセッションの乗っ取り, クッキーのストア, FTPサーバーの使用可能性, リモートアクセス, DoS攻撃
ソース：http://www.cisco.com/warp/public/707/cisco-sr-20101117-cuvc.shtml
http://www.trustmatta.com/advisories/MATTA-2010-001.txt
http://www.securityfocus.com/bid/44922
http://www.securityfocus.com/bid/44923
http://www.securityfocus.com/bid/44924
http://www.securityfocus.com/bid/44925
http://www.securityfocus.com/bid/44926
http://www.securityfocus.com/bid/44927
http://www.securityfocus.com/bid/44928
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3037
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3038
http://secunia.com/advisories/42248
CVE：CVE-2010-3037, CVE-2010-3038
危険性：High Risk

Cisco製品

ソフト名：Cisco CiscoWorks Common Services 3.0.5～3.2, Cisco CiscoWorks LAN Management Solution 2.6～3.1, Cisco CiscoWorks QoS Policy Manager 4.0/4.1, Cisco Security Manager 3.0～3.2, Cisco TelePresence Readiness Assessment Manager 1.0, Cisco Unified Operations Manager 2.0/2.1
回避策：cisco-sa-20101027-csにて対応
脆弱性：バッファオーバーフロー, リモートコード実行, サーバのクラッシュ
ソース：http://www.cisco.com/en/US/products/products_security_advisory09186a0080b51501.shtml
http://www.securityfocus.com/bid/44468
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3036
http://secunia.com/advisories/42011
http://www.vupen.com/english/advisories/2010/2793
CVE：CVE-2010-3036
危険性：High Risk

Cisco製品

ソフト名：Cisco PVC2300 Business Internet Video Camera - Audio/PoE, Cisco RVS4000 4-port Gigabit Security Router, Cisco WVC200 Wireless-G PTZ Internet Video Camera - Audio, Cisco WVC210 Wireless-G PTZ Internet Video Camera - 2-way Audio, Cisco WVC2300 Wireless-G Business Internet Video Camera - Audio
回避策：cisco-sa-20100421-vscにて対応
脆弱性：権限の昇格, 不正アクセス, デバイスの乗っ取り
ソース：http://www.cisco.com/en/US/products/products_security_advisory09186a0080b27511.shtml
http://www.securityfocus.com/bid/39612
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0593
http://secunia.com/advisories/39510
CVE：CVE-2010-0593
危険性：High Risk