{"id":1373,"date":"2019-03-28T11:19:07","date_gmt":"2019-03-28T16:19:07","guid":{"rendered":"https:\/\/cert.pa\/?p=1373"},"modified":"2019-03-28T11:19:41","modified_gmt":"2019-03-28T16:19:41","slug":"csirt-panama-aviso-2019-03-28-actualizaciones-criticas-de-seguridad-para-productos-cisco","status":"publish","type":"post","link":"https:\/\/cert.pa\/?p=1373","title":{"rendered":"CSIRT Panam\u00e1 Aviso 2019-03-28 Actualizaciones cr\u00edticas de seguridad para productos Cisco"},"content":{"rendered":"\n<p>CSIRT Panam\u00e1 Aviso 2019-03-28 Actualizaciones cr\u00edticas de seguridad para productos Cisco<\/p>\n\n\n\n<p>Gravedad: Cr\u00edtica<br>\nFecha de publicaci\u00f3n: 28 marzo 2019<br>\nFecha de modificaci\u00f3n: 28 marzo 2019<br>\n\u00daltima revisi\u00f3n: Revisi\u00f3n A.<br>\nFuente: Cisco Security Advisories and Alerts<\/p>\n\n\n\n<p>Sistemas Afectados<br>\n\u2022    Cisco Common Services Platform Collector.<br>\n\u2022    Cisco routers RV110W, RV130W y RV215W.<\/p>\n\n\n\n<p>I. Descripci\u00f3n<br>\nLa empresa Cisco ha publicado y actualizado para el mes de marzo de 2019 dos vulnerabilidades de impacto cr\u00edtico.<\/p>\n\n\n\n<p>a.    cisco-sa-20190313-cspscv. Vulnerabilidad en Cisco Common Services Platform Collector (CSPC) que puede permitir a un atacante remoto no autenticado acceder a un dispositivo afectado utilizando una cuenta que tiene una credencial est\u00e1tica predeterminada. Referencia: CWE-264 y CVE-2019-1723.<br>\nb.    cisco-sa-20190227-rmi-cmd-ex. Vulnerabilidad en la interfaz administrativa de Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router y Cisco RV215W Wireless-N VPN Router que podr\u00eda permitir a un atacante remoto no autenticado ejecutar c\u00f3digo arbitrario en el dispositivo afectado. Referencia: CWE-119 y CVE-2019-1663.<\/p>\n\n\n\n<p>Para mayor informaci\u00f3n, referirse a la &#8220;secci\u00f3n III. Referencia a soluciones, herramientas e informaci\u00f3n&#8221;.<\/p>\n\n\n\n<p>II. Impacto<br>\nComplejidad de Acceso: Alta.<br>\nAutenticaci\u00f3n: No requerida para explotarla.<br>\nTipo de impacto: Compromiso parcial o total del sistema.<\/p>\n\n\n\n<p>III. Referencia a soluciones, herramientas e informaci\u00f3n<br>\na. https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-20190313-cspcscv <br>\nb. https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-20190227-rmi-cmd-ex   <\/p>\n\n\n\n<p>IV. Informaci\u00f3n de contacto<br>\nCSIRT PANAMA<br>\nAutoridad Nacional para la Innovaci\u00f3n Gubernamental<br>\nE-mail: info@cert.pa<br>\nWeb:   http:\/\/www.cert.pa<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CSIRT Panam\u00e1 Aviso 2019-03-28 Actualizaciones cr\u00edticas de seguridad para productos Cisco Gravedad: Cr\u00edtica Fecha de publicaci\u00f3n: 28 marzo 2019 Fecha de modificaci\u00f3n: 28 marzo 2019 \u00daltima revisi\u00f3n: Revisi\u00f3n A. Fuente: Cisco Security Advisories and Alerts&#8230;<\/p>\n","protected":false},"author":4,"featured_media":448,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-1373","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1373","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1373"}],"version-history":[{"count":1,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1373\/revisions"}],"predecessor-version":[{"id":1374,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1373\/revisions\/1374"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/448"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1373"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1373"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1373"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}