Vulnslist

find the latest Cisco vulnerabilities

Cisco BroadWorks Messaging Server XML External Entity Injection Vulnerability

cisco-sa-bwms-xxe-uSLrZgKs · Medium · Published · Updated

A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server Software could allow an authenticated, remote attacker to access sensitive information or cause a partial denial of service (DoS) condition on an affected system. This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by uploading a crafted XML file that contains references to external entities. A successful exploit could allow the attacker to retrieve files from the local system, resulting in the disclosure of sensitive information, or cause the application to consume available resources, resulting in a partial DoS condition on an affected system. There are workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bwms-xxe-uSLrZgKs

Cisco advisory ·CSAF JSON

Workarounds

There is a workaround that addresses this vulnerability.

Administrators can remove patch AP.ums.22.0.1123.ap371773 from the Unified Messaging Server until the corrective patch, AP.ums.22.0.1123.ap378900, can be deployed onto the server.

Note: AP.ums.22.0.1123.ap371773 adds support for UTF-8 characters; that enhancement will be lost if the patch is removed.

While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment.

CVEsCVE-2021-1530
Cisco Bug IDsCSCvx62377
CVSS ScoreBase 5.4
Base 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L/E:X/RL:X/RC:X
Product Names From Source
Cisco BroadWorks

Related Products

Product CVE Evidence
Cisco BroadWorks CVE-2021-1530 Cisco OpenVuln