Zerologon: Samba Netlogon Elevation of Privilege Vulnerability (CVE-2020-1472)

[jays_jara]

Hi Guys,

Anybody knows if Cisco address the vulnerability below? Are the CUCM and CUC affected by this vulnerability since they are using Linux OS? Although it is an appliance type where administrators cannot change anything on the OS level but seems to be affected by the vulnerability.

I checked the Cisco Security Advisory but couldn't find any regarding this topic.

https://www.cisco.com/c/en/us/support/unified-communications/unified-communications-manager-callmanager/products-security-advisories-list.html

Security Vulnerability:

Zerologon: Samba Netlogon Elevation of Privilege Vulnerability (CVE-2020-1472)

https://access.redhat.com/articles/5435971

https://linuxsecurity.com/advisories/suse/suse-2020-2722-1-important-samba-11-16-56?rss

[Kirk J]

For quicker responses involving CUCM and CUC you might want to post over in those support areas at https://community.cisco.com/t5/collaboration-voice-and-video/ct-p/4691-collaboration-voice-video 

I would suspect CUCM and related appliances are not vulnerable as they do not provide samba related services.

Kirk...