CVE-2020-3139

{"id": "CVE-2020-3139", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2020-01-26T05:15:17.850", "references": [{"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iptable-bypass-GxW88XjL", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the out of band (OOB) management interface IP table rule programming for Cisco Application Policy Infrastructure Controller (APIC) could allow an unauthenticated, remote attacker to bypass configured deny entries for specific IP ports. These IP ports would be permitted to the OOB management interface when, in fact, the packets should be dropped. The vulnerability is due to the configuration of specific IP table entries for which there is a programming logic error that results in the IP port being permitted. An attacker could exploit this vulnerability by sending traffic to the OOB management interface on the targeted device. A successful exploit could allow the attacker to bypass configured IP table rules to drop specific IP port traffic. The attacker has no control over the configuration of the device itself. This vulnerability affects Cisco APIC releases prior to the first fixed software Release 4.2(3j)."}, {"lang": "es", "value": "Una vulnerabilidad en la programaci\u00f3n de reglas de la tabla IP de la interfaz de administraci\u00f3n fuera de banda (OOB) para el Controlador de Infraestructura de Pol\u00edticas de Aplicaci\u00f3n de Cisco (APIC) podr\u00eda permitir que un atacante remoto no autenticado omita las entradas denegadas configuradas para puertos IP espec\u00edficos. Estos puertos IP se permitir\u00edan a la interfaz de administraci\u00f3n OOB cuando, de hecho, los paquetes deber\u00edan descartarse. La vulnerabilidad se debe a la configuraci\u00f3n de entradas espec\u00edficas de la tabla IP para las cuales hay un error de l\u00f3gica de programaci\u00f3n que hace que se permita el puerto IP. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando tr\u00e1fico a la interfaz de administraci\u00f3n OOB en el dispositivo de destino. Una explotaci\u00f3n con \u00e9xito podr\u00eda permitir que el atacante omita las reglas configuradas de la tabla IP para eliminar el tr\u00e1fico espec\u00edfico del puerto IP. El atacante no tiene control sobre la configuraci\u00f3n del dispositivo en s\u00ed. Esta vulnerabilidad afecta a las versiones de Cisco APIC anteriores a la primera versi\u00f3n de software fija 4.2 (3j)."}], "lastModified": "2020-01-28T15:40:52.410", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:application_policy_infrastructure_controller:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09020743-5B05-4D18-8E60-5533315A4EA7", "versionEndExcluding": "4.2\\(3j\\)"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}