====================================================================

                             CERT-Renater

                 Note d'Information No. 2016/VULN368
_____________________________________________________________________

DATE                : 27/10/2016

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Cisco IP Interoperability and Collaboration System
                           software.

=====================================================================
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ipics
____________________________________________________________________

Cisco IP Interoperability and Collaboration System Universal Media
Services Unauthorized Access Vulnerability

Advisory ID: cisco-sa-20161026-ipics

Revision: 1.0

For Public Release 2016 October 26 16:00 GMT

+---------------------------------------------------------------------


Summary
=======

A vulnerability in the interdevice communications interface of the
Cisco IP Interoperability and Collaboration System (IPICS) Universal
Media Services (UMS) could allow an unauthenticated, remote attacker to
modify configuration parameters of the UMS and cause the system to
become unavailable.

The vulnerability is due to insufficient authentication for the
interdevice communications interface access. An attacker could exploit
this issue by accessing the interdevice communications interface and
making changes to the UMS configuration, causing the system to become
unavailable.

Cisco has released software updates that address this vulnerability.
There are no workarounds that address this vulnerability.

This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ipics

==========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================