SNS Vulnerability

Cisco Prime Collaboration Deployment SQL Injection Vulnerability

Description

(:An SQL injection vulnerability has been identified in the interface of the Cisco Prime Collaboration Deployment SQL database.:A remote attacker could exploit it by sending crafted URLs that contain specially crafted SQL statements in order to determine the presence of certain values in the database.::The vulnerability is due to a lack of input validation for user-supplied input in SQL queries.::Cisco announces that a private exploitation code exists.)

Vulnerable Products

Vulnerable Software:
Prime Collaboration Deployment (Cisco) - 10.0, 10.0(1), 10.0(1.10000.24), 10.5, 10.5(0.98000.98), ..., 11.0(0.98400.27), 11.5, 11.5(0.98000.22), 9.0, 9.5

Solution

Cisco has released new versions of Prime Collaboration Deployment which fix this vulnerability.

CVE

CVE-2016-1437

References

- cisco-sa-20160621-pcd : Cisco Prime Collaboration Deployment SQL Injection Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160621-pcd

Vulnerability Manager Detection

IPS Protection

ASQ Engine alarm	Available Since
SQL injection Prevention - GET : suspicious OR statement in URL	3.2.0
SQL injection Prevention - GET : suspicious combination of 'OR' or 'AND' statements in URL	3.2.0
SQL injection Prevention - GET : suspicious CREATE statement in URL	3.2.0
SQL injection Prevention - GET : suspicious CAST statement in URL	3.2.0
SQL injection Prevention - GET : suspicious OPENROWSET statement in URL	3.2.0
SQL injection Prevention - GET : suspicious DECLARE statement in URL	3.2.0
SQL injection Prevention - GET : suspicious OPENQUERY statement in URL	3.2.0
SQL injection Prevention - GET : suspicious shutdown statement in URL	3.2.0
SQL injection Prevention - GET : suspicious UNION SELECT statement in URL	3.2.0
SQL injection Prevention - GET : possible database version probing	3.2.0
SQL injection Prevention - GET : suspicious UPDATE SET statement in URL	3.2.0
SQL injection Prevention - GET : suspicious SELECT statement in URL	3.2.0
SQL injection Prevention - GET : suspicious INSERT statement in URL	3.2.0
SQL injection Prevention - GET : suspicious DROP statement in URL	3.2.0
SQL injection Prevention - GET : suspicious EXEC statement in URL	3.2.0
SQL injection Prevention - GET : block comment delimiters in URL	3.2.0
SQL injection Prevention - GET : suspicious combination of 'select' and 'sleep' statements in URL	5.0.0
SQL injection Prevention - GET : Evasion attempt with CAST and EXEC statements	5.0.0
SQL injection Prevention - GET : Authentication bypass attempt with OR statement	5.0.0

Risk level

Moderate

Vulnerability First Public Report Date

2016-06-22

Target Type

Server

Possible exploit

Remote