中文描述:

Cisco ASR 1000 Series Aggregation Services Routers和Cisco cBR-8 Converged Broadband Routers都是美国思科（Cisco）公司的路由器设备。IOS XE是使用在其中的一套网络设备专用的操作系统。 使用IOS XE 3.16版本至16.5版本的Cisco ASR 1000 Series Aggregation Services Routers和Cisco cBR-8 Converged Broadband Routers中的线卡的主板控制台端口存在安全漏洞。本地攻击者可通过物理连接线卡上的控制台端口利用该漏洞访问受影响设备的操作系统。

英文描述:

A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation Services Routers and Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, physical attacker to access an affected device's operating system. The vulnerability exists because an engineering console port is available on the motherboard of the affected line cards. An attacker could exploit this vulnerability by physically connecting to the console port on the line card. A successful exploit could allow the attacker to gain full access to the affected device's operating system. This vulnerability affects only Cisco ASR 1000 Series Routers that have removable line cards and Cisco cBR-8 Converged Broadband Routers, if they are running certain Cisco IOS XE 3.16 through 16.5 releases. Cisco Bug IDs: CSCvc65866, CSCve77132.

CWE类型:

标签:

中文解决方案:

英文解决方案:

临时解决方案: