{"id":2326,"date":"2020-09-03T14:57:51","date_gmt":"2020-09-03T19:57:51","guid":{"rendered":"https:\/\/cert.pa\/?p=2326"},"modified":"2020-09-03T15:04:45","modified_gmt":"2020-09-03T20:04:45","slug":"csirt-panama-aviso-03-09-2020-cisco-libera-actualizaciones-de-seguridad","status":"publish","type":"post","link":"https:\/\/cert.pa\/?p=2326","title":{"rendered":"CSIRT Panam\u00e1 Aviso 03-09-2020 Cisco libera actualizaciones de seguridad"},"content":{"rendered":"\n<p><strong>Gravedad: Critico<\/strong><br> Fecha de publicaci\u00f3n: 03 de septiembre de 2020<br> Fecha de modificaci\u00f3n: 03 de septiembre de 2020<br> \u00daltima revisi\u00f3n: Revisi\u00f3n A.<br> Fuente: Cisco Security Advisories and Alerts<\/p>\n\n\n\n<p><strong>Sistemas Afectados<\/strong> <br> \u2022    Jabber para Windows<br> \u2022    NFV empresarial<br> \u2022    IOS XR<\/p>\n\n\n\n<p><strong>I. Descripci\u00f3n<\/strong><br> La empresa Cisco ha publicado actualizaciones de seguridad que aborda vulnerabilidades de las que podemos mencionar:<br> \u2022    Jabber para Windows: manejo de mensajes y controlador de protocolos, que permite la ejecuci\u00f3n de c\u00f3digo arbitrario e inyecci\u00f3n de comandos<br> \u2022    NFV empresarial: podr\u00eda permitir la sobre escritura de archivos del software.<br> \u2022    IOS XR: podr\u00eda permitir la escalaci\u00f3n de privilegios de usuario.<\/p>\n\n\n\n<p>Se les exhorta a revisar los enlaces en la secci\u00f3n III de referencias, para aplicar las acciones necesarias.<\/p>\n\n\n\n<p><strong>II. Impacto<\/strong><br> Complejidad de Acceso: Media a Alta<br> Autenticaci\u00f3n: No requerida para explotarla.<br> Tipo de impacto: Compromiso parcial o total del sistema.<\/p>\n\n\n\n<p><strong>III. Referencia a soluciones, herramientas e informaci\u00f3n<\/strong><br> a.    <a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-jabber-UyTKCPGg\">https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-jabber-UyTKCPGg<\/a> <br> b.    <a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-jabber-vY8M4KGB\">https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-jabber-vY8M4KGB<\/a><br> c.    <a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-nfvis-file-overwrite-UONzPMkr\">https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-nfvis-file-overwrite-UONzPMkr<\/a><br> d.    <a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-iosxr-cli-privescl-sDVEmhqv\">https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-iosxr-cli-privescl-sDVEmhqv<\/a><br> e.    <a href=\"https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-iosxr-LJtNFjeN\">https:\/\/tools.cisco.com\/security\/center\/content\/CiscoSecurityAdvisory\/cisco-sa-iosxr-LJtNFjeN<\/a> <\/p>\n\n\n\n<p><strong>IV. Informaci\u00f3n de contacto<\/strong><br> CSIRT PANAMA<br> Autoridad Nacional para la Innovaci\u00f3n Gubernamental<br> E-Mail: info@cert.pa<br> Web:   http:\/\/www.cert.pa<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Gravedad: Critico Fecha de publicaci\u00f3n: 03 de septiembre de 2020 Fecha de modificaci\u00f3n: 03 de septiembre de 2020 \u00daltima revisi\u00f3n: Revisi\u00f3n A. Fuente: Cisco Security Advisories and Alerts Sistemas Afectados \u2022 Jabber para Windows \u2022&#8230;<\/p>\n","protected":false},"author":4,"featured_media":2328,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-2326","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/2326","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2326"}],"version-history":[{"count":1,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/2326\/revisions"}],"predecessor-version":[{"id":2327,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/2326\/revisions\/2327"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/2328"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2326"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2326"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2326"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}