Cisco Issues Urgent Fix for Authentication Bypass Bug Affecting BroadWorks Platform

Cisco has released security fixes to deal with numerous security flaws, like a critical bug, that could be exploited by a threat actor to just take regulate of an influenced program or induce a denial-of support (DoS) issue.

The most critical of the issues is CVE-2023-20238, which has the maximum CVSS severity score of 10.. It truly is explained as an authentication bypass flaw in the Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Providers Platform.

Thriving exploitation of the bug, a weak spot in the single indicator-on (SSO) implementation and discovered for the duration of inside tests, could let an unauthenticated, distant attacker to forge the credentials essential to entry an influenced program.

“This vulnerability is because of to the system utilised to validate SSO tokens,” Cisco stated. “An attacker could exploit this vulnerability by authenticating to the application with solid credentials. A successful exploit could permit the attacker to dedicate toll fraud or to execute instructions at the privilege degree of the forged account.”

“If that account is an Administrator account, the attacker would have the capability to view private facts, modify consumer options, or modify configurations for other end users. To exploit this vulnerability, the attacker would need a legitimate user ID that is affiliated with an afflicted Cisco BroadWorks program.”

The issue, for each the business, impacts the two BroadWorks releases and have 1 of the subsequent applications enabled: AuthenticationService, BWCallCenter, BWReceptionist, CustomMediaFilesRetrieval, ModeratorClientApp, PublicECLQuery, PublicReporting, UCAPI, Xsi-Actions, Xsi-Situations, Xsi-MMTel, or Xsi-VTR.

Fixes for the vulnerability are offered in edition AP.platform.23..1075.ap385341, 2023.06_1.333, and 2023.07_1.332.

Also solved by Cisco is a substantial-severity flaw in the RADIUS information processing feature of Cisco Identity Products and services Engine (CVE-2023-20243, CVSS rating: 8.6) that could make it possible for an unauthenticated, distant attacker to lead to the influenced procedure to cease processing RADIUS packets.

“This vulnerability is due to inappropriate dealing with of particular RADIUS accounting requests,” Cisco claimed. “A profitable exploit could allow for the attacker to induce the RADIUS course of action to unexpectedly restart, resulting in authentication or authorization timeouts and denying respectable buyers access to the network or provider.”

CVE-2023-20243 impacts variations 3.1 and 3.2 of Cisco Identity Providers Engine. It has been patched in variations 3.1P7 and 3.2P3. Other versions of the product are not prone.

Juniper Networks Addresses Intense BGP Flaw with Out-of-Band Update

The advisories occur days soon after Juniper Networks shipped an out-of-band update for an incorrect input validation flaw in the Routing Protocol Daemon (rpd) of Junos OS and Junos OS Advanced, which permits an unauthenticated, network-primarily based attacker to induce a DoS issue.

The vulnerability influences numerous Border Gateway Protocol (BGP) implementations, for every security researcher Ben Cartwright-Cox, who made the discovery. Juniper Networks is monitoring it as CVE-2023-4481 (CVSS score: 7.5), FRRouting as CVE-2023-38802, and OpenBSD OpenBGPd as CVE-2023-38283.

“When particular specific crafted BGP UPDATE messages are obtained above an established BGP session, a single BGP session may possibly be torn down with an UPDATE concept mistake, or the issue may possibly propagate past the local technique which will continue to be non-impacted, but may have an impact on one particular or much more distant techniques,” Juniper Networks reported.

Approaching WEBINARWay Also Susceptible: Uncovering the State of the Id Attack Area

Obtained MFA? PAM? Company account security? Locate out how well-outfitted your organization definitely is versus identity threats

Supercharge Your Competencies

“This issue is exploitable remotely as the crafted UPDATE concept can propagate by way of unaffected units and intermediate BGP speakers. Constant receipt of the crafted BGP UPDATE messages will develop a sustained denial-of-company (DoS) condition for impacted devices.”

Nevertheless for the attack to be profitable, a remote attacker is necessary to have at minimum a person set up BGP session. The vulnerability has been fastened in Junos OS 23.4R1 and Junos OS Evolved 23.4R1-EVO.

Unpatched Tenda Modem Router Vulnerability

In a similar improvement, CERT Coordination Centre (CERT/CC) in-depth an unpatched authentication bypass vulnerability in Tenda’s N300 Wireless N VDSL2 Modem Router (CVE-2023-4498, ) that could enables a remote, unauthenticated user to accessibility delicate information via a specifically crafted request.

“Prosperous exploitation of this vulnerability could grant the attacker obtain to internet pages that would usually involve authentication,” CERT/CC stated. “An unauthenticated attacker could therefore acquire obtain to sensitive info, these types of as the Administrative password, which could be applied to launch additional attacks.”

In the absence of a security update, it is advised that buyers disable both of those the remote (WAN-aspect) administration companies and the web interface on the WAN on any SoHo router.

Discovered this short article intriguing? Abide by us on Twitter  and LinkedIn to examine more exclusive written content we submit.

Some parts of this article are sourced from:
thehackernews.com