====================================================================

                              CERT-Renater

                 Note d'Information No. 2017/VULN173
_____________________________________________________________________

DATE                : 08/06/2017

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S):  Systems running Cisco Prime Data Center Network
                                    Manager software.

=====================================================================
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm1
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2
____________________________________________________________________

Cisco Security Advisory:  Cisco Prime Data Center Network Manager Debug
Remote Code Execution Vulnerability

Advisory ID: cisco-sa-20170607-dcnm1

Revision: 1.0

For Public Release: 2017 June 7 16:00 GMT

Last Updated: 2017 June 7 16:00 GMT

CVE ID(s): CVE-2017-6639

CVSS Score v(3): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

+---------------------------------------------------------------------

Summary
=======
A vulnerability in the role-based access control (RBAC) functionality
of Cisco Prime Data Center Network Manager (DCNM) could allow an
unauthenticated, remote attacker to access sensitive information or
execute arbitrary code with root privileges on an affected system.

The vulnerability is due to the lack of authentication and
authorization mechanisms for a debugging tool that was inadvertently
enabled in the affected software. An attacker could exploit this
vulnerability by remotely connecting to the debugging tool via TCP. A
successful exploit could allow the attacker to access sensitive
information about the affected software or execute arbitrary code with
root privileges on the affected system.

Cisco has released software updates that address this vulnerability.
There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm1
["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm1"]

____________________________________________________________________

Cisco Security Advisory: Cisco Prime Data Center Network Manager Server
Static Credential Vulnerability

Advisory ID: cisco-sa-20170607-dcnm2

Revision: 1.0

For Public Release: 2017 June 7 16:00 GMT

Last Updated: 2017 June 7 16:00 GMT

CVE ID(s): CVE-2017-6640

CVSS Score v(3): 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

+---------------------------------------------------------------------

Summary
=======
A vulnerability in Cisco Prime Data Center Network Manager (DCNM)
Software could allow an unauthenticated, remote attacker to log in to
the administrative console of a DCNM server by using an account that
has a default, static password. The account could be granted root- or
system-level privileges.

The vulnerability exists because the affected software has a default
user account that has a default, static password. The user account is
created automatically when the software is installed. An attacker could
exploit this vulnerability by connecting remotely to an affected system
and logging in to the affected software by using the credentials for
this default user account. A successful exploit could allow the
attacker to use this default user account to log in to the affected
software and gain access to the administrative console of a DCNM server.

Cisco has released software updates that address this vulnerability.
There are no workarounds that address this vulnerability.

This advisory is available at the following link:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2
["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-dcnm2"]

==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================