Test Kennung:	1.3.6.1.4.1.25623.1.0.105637
Kategorie:	CISCO
Titel:	Cisco IOS Software Smart Install Remote Code Execution Vulnerability
Zusammenfassung:	A vulnerability exists in the Smart Install feature of Cisco Catalyst; Switches running Cisco IOS Software that could allow an; unauthenticated, remote attacker to perform remote code execution on the; affected device.;; Cisco has released software updates that address this vulnerability.; There are no workarounds available to mitigate this vulnerability other than disabling the Smart Install feature.;; Note: The September 28, 2011, Cisco IOS Software Security Advisory bundled publication includes ten Cisco Security Advisories.; Nine of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses a vulnerability in Cisco Unified Communications Manager.; Each advisory lists the Cisco IOS Software releases that correct the vulnerability or vulnerabilities detailed; in the advisory as well as the Cisco IOS Software releases that correct all vulnerabilities in the September 2011 Bundled Publication.;; Individual publication links are in `Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication` at the references.
Beschreibung:	Summary: A vulnerability exists in the Smart Install feature of Cisco Catalyst Switches running Cisco IOS Software that could allow an unauthenticated, remote attacker to perform remote code execution on the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds available to mitigate this vulnerability other than disabling the Smart Install feature. Note: The September 28, 2011, Cisco IOS Software Security Advisory bundled publication includes ten Cisco Security Advisories. Nine of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses a vulnerability in Cisco Unified Communications Manager. Each advisory lists the Cisco IOS Software releases that correct the vulnerability or vulnerabilities detailed in the advisory as well as the Cisco IOS Software releases that correct all vulnerabilities in the September 2011 Bundled Publication. Individual publication links are in `Cisco Event Response: Semiannual Cisco IOS Software Security Advisory Bundled Publication` at the references. Solution: See the referenced vendor advisory for a solution. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3271 Cisco Security Advisory: 20110928 Cisco IOS Software Smart Install Remote Code Execution Vulnerability http://www.cisco.com/en/US/products/products_security_advisory09186a0080b95d4f.shtml
Copyright	Copyright (C) 2016 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.