情報源
US-CERT Current Activity
Cisco Releases Security Updates
https://www.us-cert.gov/ncas/current-activity/2017/07/05/Cisco-Releases-Security-Updates
概要
– Cisco Elastic Services Controller 2.3.1.434 より前のバージョン
– Cisco Elastic Services Controller 2.3.2 より前のバージョン
– Cisco Ultra Services Framework UAS 5.0.3 より前のバージョン
– Cisco Ultra Services Framework UAS 5.1 より前のバージョン
– Cisco Ultra Services Framework Staging Server 5.0.3 より前のバージョン
– Cisco Ultra Services Framework Staging Server 5.1 より前のバージョン
– Cisco Ultra Services Framework 5.0.3 より前のバージョン
– Cisco Ultra Services Framework 5.1 より前のバージョン
– Cisco StarOS が稼働している ASR 5000 シリーズ
– Cisco StarOS が稼働している ASR 5500 シリーズ
– Cisco StarOS が稼働している ASR 5700 シリーズ
– Cisco StarOS が稼働している Virtualized Packet Core-Distributed Instance (VPC-DI)
– Cisco StarOS が稼働している Virtualized Packet Core-Single Instance (VPC-SI)
関連文書(英語)
Cisco Elastic Services Controller Unauthorized Access Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-esc2
Cisco Ultra Services Framework UAS Unauthenticated Access Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-uas
Cisco Ultra Services Framework Staging Server Arbitrary Command Execution Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf3
Cisco StarOS CLI Command Injection Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-asrcmd
Cisco Elastic Services Controller Arbitrary Command Execution Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-esc1
Cisco Ultra Services Framework AutoVNF Symbolic Link Handling Information Disclosure Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf1
Cisco Ultra Services Framework AutoVNF Log File User Credential Information Disclosure Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf2
引用元:JPCERTコーディネーションセンター
「JPCERT/CC WEEKLY REPORT 2017-07-12」
https://www.jpcert.or.jp/wr/2017/wr172601.html