cisco-sa-bworks-xxe-uwUd7CEt: Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system.This vulnerability exists because XML entries are improperly parsed due to external entity resolution being allowed by default. An attacker could exploit this vulnerability by sending a crafted XML message to the Open Client Interface - Provisioning (OCI-P) service. A successful exploit could allow the attacker to view sensitive files from the filesystem with the privileges of the Cisco BroadWorks user.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bworks-xxe-uwUd7CEt
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Affected Cisco BroadWorks systems that expose the Open Client Interface - Provisioning (OCI-P) service are exposed. External entity resolution is allowed by default in the vulnerable OCI XML Parser.
Does an attacker need credentials or local access?
No. The vulnerability can be exploited by an unauthenticated remote attacker who can send a crafted XML message to the OCI-P service.
What could an attacker access through successful exploitation?
An attacker could read sensitive configuration information and view sensitive files from the filesystem. Access is limited to the privileges of the Cisco BroadWorks user.
What should be done if patching cannot be performed immediately?
The provided information states that there are no workarounds that address this vulnerability. Cisco software updates are available to remediate it.