Phone : +91 95 8290 7788 | Email : sales@itmonteur.net

Register & Request Quote | Submit Support Ticket

Home » Firewall » Cisco Industrial Network Director found containing major security bugs

Cisco Industrial Network Director found containing major security bugs

  • Cisco identified three security flaws in the software which is designed for managing industrial networks.
  • Among the three, one was marked “high severity” and could allow attackers to execute arbitrary code.

Cisco has identified three security bugs in Industrial Network Director (IND) software. In a series of security advisories released on Wednesday, Cisco addressed these major flaws present in IND. One of these flaws was a “high severity” remote code execution (RCE) vulnerability that could allow threat actors to execute arbitrary code with elevated privileges.

Cisco IND is a software designed to manage industrial networks and helps monitor automated devices in an industrial network.

Key highlights

  • The RCE flaw, designated as CVE-2019-1861, had a CVSS score of 7.2. The flaw was the result of a file validation issue in IND. In an advisory, Cisco mentions that an attacker could exploit this flaw by authenticating to an affected system using administrator-level privileges and subsequently uploading arbitrary files.
  • The other two flaws identified by Cisco are a stored cross-site scripting (XSS) flaw and a cross-site request forgery (CSRF) vulnerability. While the XSS flawenables attackers to send malicious requests, the CSRF vulnerability allows anyone to perform arbitrary actions on the affected systems.
  • Cisco has released software updates for the RCE flaw. However, XSS and CSRF flaws are still left unpatched.

Worth noting

Apart from addressing IND flaws, Cisco has also released security updates for various products that had security holes. The products patched are Cisco Unified Communications Manager IM and Presence Service, Cisco TelePresence Video Communication Server, Cisco Expressway Series, Cisco Enterprise Chat and Email Center, Cisco Unified Computing System, Cisco IOS XR, and Cisco Webex Meetings Server.

Information Security - InfoSec - Cyber Security - Firewall Providers Company in India

Juniper Firewall
Cisco Firewall
Checkpoint Firewall
paloalto Firewall
Fortinet Firewall
Forcepoint Firewall

 

Sophos Firewall
WatchGuard Firewall
Barracuda Firewall
Sonicwall Firewall
GajShield Firewall
Seqrite Firewall

 

 

 

 

 

 

 

 

 

 

 

What is Firewall? A Firewall is a network security device that monitors and filters incoming and outgoing network traffic based on an organization's previously established security policies. At its most basic, a firewall is essentially the barrier that sits between a private internal network and the public Internet.

 

Secure your network at the gateway against threats such as intrusions, Viruses, Spyware, Worms, Trojans, Adware, Keyloggers, Malicious Mobile Code (MMC), and other dangerous applications for total protection in a convenient, affordable subscription-based service. Modern threats like web-based malware attacks, targeted attacks, application-layer attacks, and more have had a significantly negative effect on the threat landscape. In fact, more than 80% of all new malware and intrusion attempts are exploiting weaknesses in applications, as opposed to weaknesses in networking components and services. Stateful firewalls with simple packet filtering capabilities were efficient blocking unwanted applications as most applications met the port-protocol expectations. Administrators could promptly prevent an unsafe application from being accessed by users by blocking the associated ports and protocols.

 

Firewall Firm is an IT Monteur Firewall Company provides Managed Firewall Support, Firewall providers , Firewall Security Service Provider, Network Security Services, Firewall Solutions India , New Delhi - India's capital territory , Mumbai - Bombay , Kolkata - Calcutta , Chennai - Madras , Bangaluru - Bangalore , Bhubaneswar, Ahmedabad, Hyderabad, Pune, Surat, Jaipur, Firewall Service Providers in India

Sales Number : +91 95 8290 7788 | Support Number : +91 94 8585 7788
Sales Email : sales@itmonteur.net | Support Email : support@itmonteur.net

Register & Request Quote | Submit Support Ticket

Firewall Firm is a Managed Firewall Security Solution Provider Company in India | Digital Marketing by SEO Company India | Powered by IT Monteur