Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability
A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated attacker with access to a backup file to decrypt sensitive information stored in the full state and configuration backup files. This vulnerability is due to a weakness in the encryption method used for the backup function. An attacker could exploit this vulnerability by leveraging a static key used for the backup configuration feature. A successful exploit could allow the attacker to decrypt sensitive information that is stored in full state and configuration backup files, such as local user credentials, authentication server passwords, Simple Network Management Protocol (SNMP) community names, and other credentials. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of the February 2023 Cisco FXOS and NX-OS Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: February 2023 Semiannual Cisco FXOS and NX-OS Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75057"].
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-20016US | medium6.5OT erhöht | — | ||
A vulnerability in the backup configuration feature of Cisco UCS Manager Software and in the configuration export feature of Cisco FXOS Software could allow an unauthenticated atta… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Vulnerability Policyexternal
- Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerabilityself
- Cisco Security Vulnerability Policyexternal
- Security Impact Rating (SIR)external
- considering software upgradesexternal
- Cisco Software Checkerexternal
- Cisco Event Response: February 2023 Semiannual Cisco FXOS and NX-OS Software Security Advisory Bundled Publicationexternal
- Cisco Security Advisories pageexternal
Behebungen (87)
- BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.1.63 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.1.63 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.1.66 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.1.66 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.1.70 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.1.70 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.101 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.101 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.137 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.137 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.148 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.148 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.149 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.149 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.17 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.17 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.19 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.19 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.24 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.24 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.26 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.26 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.28 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.28 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.54 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.54 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.60 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.60 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.71 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.71 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.83 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.83 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.86 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.86 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.91 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.91 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.97 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.2.2.97 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.110 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.110 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.111 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.111 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.130 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.130 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.144 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.144 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.145 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.145 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.155 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.155 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.166 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.166 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.173 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.173 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.179 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.179 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.180 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.180 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.190 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.190 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.215 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.215 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.216 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.216 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.219 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.219 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.230 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.230 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.56 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.56 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.58 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.58 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.66 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.66 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.73 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.73 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.75 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.75 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.88 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.88 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.91 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.91 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.93 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.93 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.99 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower Extensible Operating System (FXOS) 2.3.1.99 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Unified Computing System (Managed)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan