CISCO: numerose "falle" in più prodotti wireless...

[mauripucci]

come da titoli Cisco segnala più falle in vari prodotti:

Affected Products
The Cisco WLC product family is affected by multiple vulnerabilities. Affected versions of Cisco WLC Software vary depending on the specific vulnerability.
Vulnerable Products
For specific version information, refer to the Software Versions and Fixes section of this advisory.
Each of the following products is affected by at least one of the vulnerabilities covered in this security advisory:
Cisco 2000 Series WLC
Cisco 2100 Series WLC
Cisco 2500 Series WLC
Cisco 4100 Series WLC
Cisco 4400 Series WLC
Cisco 5500 Series WLC
Cisco 7500 Series WLC
Cisco 8500 Series WLC
Cisco 500 Series Wireless Express Mobility Controllers
Cisco Wireless Services Module (Cisco WiSM)
Cisco Wireless Services Module version 2 (Cisco WiSM version 2)
Cisco NME-AIR-WLC Module for Integrated Services Routers (ISRs)
Cisco NM-AIR-WLC Module for Integrated Services Routers (ISRs)
Cisco Catalyst 3750G Integrated WLCs
Cisco Flex 7500 Series Cloud Controller
Cisco Virtual Wireless Controller
Cisco Wireless Controller Software for Integrated Services Module 300 and Cisco Services-Ready Engine 700, 710, 900, and 910

pertanto vista la pericolosità:
The Cisco Wireless LAN Controller (Cisco WLC) product family is affected by the following four vulnerabilities:

Cisco Wireless LAN Controllers Wireless Intrusion Prevention System (wIPS) Denial of Service Vulnerability

Cisco Wireless LAN Controllers Session Initiation Protocol Denial of Service Vulnerability

Cisco Wireless LAN Controllers HTTP Profiling Remote Code Execution Vulnerability

Cisco Wireless LAN Controllers SNMP Unauthorized Access Vulnerability

è consigliabile l' update di sicurezza:

http://tools.cisco.com/security/center/ ... 130123-wlc" onclick="window.open(this.href);return false;

[Kernel Panic]

Io sono cliente Netgear ......

[mauripucci]

Io sono cliente Netgear ......

allora neanche tu sei molto al sicuro...

Have Networked-Device Makers Put Consumer Security At Risk?

Portable SDK for UPnP Devices (libupnp) contains multiple buffer overflows in SSDP

Rapid7 pulled few punches in the report. It names prominent consumer product makers - Linksys, Netgear, Belkin and D-Link – whose products reportedly use the misconfigured protocols. And it bluntly charged the device makers with risking their customers' information security.

http://www.grtcorp.com/content/have-net ... urity-risk" onclick="window.open(this.href);return false;

[Kernel Panic]