Zerologon: Samba Netlogon Elevation of Privilege Vulnerability (CVE-2020-1472)

jays_jara — Mon, 28 Sep 2020 15:18:39 GMT

Hi Guys,

Anybody knows if Cisco address the vulnerability below? Are the CUCM and CUC affected by this vulnerability since they are using Linux OS? Although it is an appliance type where administrators cannot change anything on the OS level but seems to be affected by the vulnerability.

I checked the Cisco Security Advisory but couldn't find any regarding this topic.

https://www.cisco.com/c/en/us/support/unified-communications/unified-communications-manager-callmanager/products-security-advisories-list.html

Security Vulnerability:

Zerologon: Samba Netlogon Elevation of Privilege Vulnerability (CVE-2020-1472)

https://access.redhat.com/articles/5435971

https://linuxsecurity.com/advisories/suse/suse-2020-2722-1-important-samba-11-16-56?rss

Re: Zerologon: Samba Netlogon Elevation of Privilege Vulnerability (CVE-2020-1472)

Kirk J — Tue, 13 Oct 2020 10:48:03 GMT

For quicker responses involving CUCM and CUC you might want to post over in those support areas at https://community.cisco.com/t5/collaboration-voice-and-video/ct-p/4691-collaboration-voice-video

I would suspect CUCM and related appliances are not vulnerable as they do not provide samba related services.

Kirk...

topic Zerologon: Samba Netlogon Elevation of Privilege Vulnerability (CVE-2020-1472) in Application Networking

Zerologon: Samba Netlogon Elevation of Privilege Vulnerability (CVE-2020-1472)

Zerologon: Samba Netlogon Elevation of Privilege Vulnerability (CVE-2020-1472)

Re: Zerologon: Samba Netlogon Elevation of Privilege Vulnerability (CVE-2020-1472)