Cisco Releases Security Advisory

Cisco has released a security advisory to address a vulnerability in the web framework of Cisco Prime Central for Hosted Collaboration Solution HCS Assurance. This vulnerability could allow an unauthenticated, remote attacker to access sensitive information on the system, including user...

Design/Logic Flaw

The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote attackers to discover usernames and passwords via an HTTP request, aka Bug ID CSCud32600...

CVE-2013-3473: Improper Authentication

The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote attackers to discover usernames and passwords via an HTTP request, aka Bug ID CSCud32600...

PT-2013-4423

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution HCS Assurance versions prior to 9.1.1 Description The issue is related to the web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance, which does not properly...

CVE-2013-3388

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets to port 44444, aka Bug ID CSCtz92776...

Memory corruption

Memory leak in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets, aka Bug ID CSCub59158...

Code injection

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service disk consumption via a flood of TCP packets to port 5400, leading to large error-log files, aka Bug ID CSCua42724...

Code injection

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets to port 1 61615 or 2 61616, aka Bug ID CSCtz90114...

Design/Logic Flaw

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets to port 44444, aka Bug ID CSCtz92776...

CVE-2013-3389

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets to port 1 61615 or 2 61616, aka Bug ID CSCtz90114...

CVE-2013-3387

Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance 8.6 and 9.x before 9.2(1) is affected by CVE-2013-3387. The vulnerability allows remote attackers to cause a denial of service (disk consumption) by flooding TCP port 5400, producing large error-log files (Bug ID CSCua42724). A...

CVE-2013-3390: Undefined Security Weakness

Memory leak in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets, aka Bug ID CSCub59158...

PT-2013-4346

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution HCS Assurance versions 8.6 through 9.1 Description The issue allows remote attackers to cause a denial of service due to memory consumption via a flood of TCP packets to port 44444...

CVE-2013-3389: Undefined Security Weakness

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets to port 1 61615 or 2 61616, aka Bug ID CSCtz90114...

CVE-2013-3387: Undefined Security Weakness

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service disk consumption via a flood of TCP packets to port 5400, leading to large error-log files, aka Bug ID CSCua42724...

PT-2013-4348

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution HCS Assurance versions 8.6 through 9.1 Description A memory leak issue allows remote attackers to cause a denial of service by consuming memory via a flood of TCP packets. Recommendations F...

PT-2013-4345

Name of the Vulnerable Software and Affected Versions Cisco Prime Central for Hosted Collaboration Solution HCS Assurance versions 8.6 through 9.1 Description The issue allows remote attackers to cause a denial of service, specifically disk consumption, by flooding TCP packets to port 5400. This...

CVE-2013-3388: Undefined Security Weakness

Cisco Prime Central for Hosted Collaboration Solution HCS Assurance 8.6 and 9.x before 9.21 allows remote attackers to cause a denial of service memory consumption via a flood of TCP packets to port 44444, aka Bug ID CSCtz92776...

CVE-2013-3398

The web framework in Cisco Prime Central for Hosted Collaboration Solution HCS Assurance provides different responses to requests for arbitrary pathnames depending on whether the pathname exists, which allows remote attackers to enumerate directories and files via a series of crafted requests, ak...

CVE-2013-3398

CVE-2013-3398 affects Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance. The web framework responds differently to requests for arbitrary pathnames, enabling unauthenticated remote attackers to enumerate directories and files. Root cause: insufficient security hardening of HTT...