Vulnslist

find the latest Cisco vulnerabilities

Cisco IR800 Integrated Services Router ROM Monitor Input Validation Vulnerability

cisco-sa-20170906-isr · Medium · Published · Updated

A vulnerability in the ROM Monitor (ROMMON) code of Cisco IR800 Integrated Services Router Software could allow an unauthenticated, local attacker to boot an unsigned Hypervisor on an affected device and compromise the integrity of the system. The vulnerability is due to insufficient sanitization of user input. An attacker who can access an affected router via the console could exploit this vulnerability by entering ROMMON mode and modifying ROMMON variables. A successful exploit could allow the attacker to execute arbitrary code and install a malicious version of Hypervisor firmware on an affected device. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170906-isr

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address this vulnerability.

CVEsCVE-2017-12223
Cisco Bug IDsCSCvb44027
CVSS ScoreBase 6.4
Base 6.4 CVSS:3.0/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:X
Product Names From Source
Cisco IR800 Integrated Services Router Software

Related Products

Product CVE Evidence
Cisco RV Series Routers CVE-2017-12223 Cisco OpenVuln
Cisco Nexus Dashboard CVE-2017-12223 Cisco OpenVuln
Cisco 800 Series Integrated Services Routers CVE-2017-12223 Cisco OpenVuln
Cisco 800 Series Industrial Integrated Services Routers CVE-2017-12223 Cisco OpenVuln
Cisco IR800 Integrated Services Router Software CVE-2017-12223 Cisco OpenVuln