300개 이상의 Cisco 네트워크 스위치 모델에 영향을 미치는 제로데이 발견

300개 이상의 Cisco 네트워크 스위치 모델에 영향을 미치는 제로데이 발견

Disable TELNET! Cisco finds 0-Day in CIA Dump affecting over 300 Network Switch Models

최근 Cisco는 300가지 이상의 스위치 모델에 영향을 미치는 심각한 제로데이  IOS / IOS XE 취약점에 대해 경고했습니다. Cisco는 지난 주 Wikileaks에서 공개한 약 8,761개의 문서 및 파일인 "Vault 7"을 분석하던 중 해당 취약점을 발견하였습니다. 

이 취약점(CVE-2017-3881)은 승인되지 않은 원격의 공격자가 기기를 재부팅 시키거나 상승된 권한을 이용하여 원격으로 악성코드를 실행해 기기를 완전히 제어할 수 있는 매우 심각한 취약점 입니다. 

CMP프로토콜(Cluster Management Protocol)은 Telnet이나 SSH를 사용해 클러스터 멤버들 간에 스위치 클러스터에 대한 정보를 전달하도록 설계되었습니다. 

이 취약점은 영향받는 Cisco 장비들의 기본 설정에 존재하며, IPv4나 IPv6를 통한 텔넷 세션 협상 과정 중 악용될 수 있습니다. 

Cisco에 따르면, 이 버그는 CMP내의 텔넷 연결에서 다음 두 가지 요인으로 인해 발행된다고 밝혔습니다. 

· CMP는 텔넷 관련 옵션들을 클러스터 멤버들 사이에서 이루어지는 내부의, 로컬 통신에만 사용되도록 제한하지 않고, 대신 영향을 받는 장비로의 모든 텔넷 연결들을 통한 명령어들을 수락하고 처리합니다. 

· 조작된 CMP는 관련 텔넷 옵션을 부적절하게 처리합니다. 

따라서, 이 취약점을 악용하기 위해서 공격자는 “텔넷 연결을 수락하도록 설정 된 영향을 받는 Cisco 기기와의 텔넷 세션을 수립 하는 동시에 조작 된 CMP 관련 텔넷 옵션들”을 보내야 합니다. 

이를 통하여 공격자는 원격으로 악성코드를 실행하고 영향을 받는 장비를 완전히 제어하거나 기기를 재부팅 시킬 수 있게됩니다. 

취약한 모델

Cisco Catalyst 2350-48TD-S Switch

Cisco Catalyst 2350-48TD-SD Switch

Cisco Catalyst 2360-48TD-S Switch

Cisco Catalyst 2918-24TC-C Switch

Cisco Catalyst 2918-24TT-C Switch

Cisco Catalyst 2918-48TC-C Switch

Cisco Catalyst 2918-48TT-C Switch

Cisco Catalyst 2928-24TC-C Switch

Cisco Catalyst 2960-24-S Switch

Cisco Catalyst 2960-24LC-S Switch

Cisco Catalyst 2960-24LT-L Switch

Cisco Catalyst 2960-24PC-L Switch

Cisco Catalyst 2960-24PC-S Switch

Cisco Catalyst 2960-24TC-L Switch

Cisco Catalyst 2960-24TC-S Switch

Cisco Catalyst 2960-24TT-L Switch

Cisco Catalyst 2960-48PST-L Switch

Cisco Catalyst 2960-48PST-S Switch

Cisco Catalyst 2960-48TC-L Switch

Cisco Catalyst 2960-48TC-S Switch

Cisco Catalyst 2960-48TT-L Switch

Cisco Catalyst 2960-48TT-S Switch

Cisco Catalyst 2960-8TC-L Compact Switch

Cisco Catalyst 2960-8TC-S Compact Switch

Cisco Catalyst 2960-Plus 24LC-L Switch

Cisco Catalyst 2960-Plus 24LC-S Switch

Cisco Catalyst 2960-Plus 24PC-L Switch

Cisco Catalyst 2960-Plus 24PC-S Switch

Cisco Catalyst 2960-Plus 24TC-L Switch

Cisco Catalyst 2960-Plus 24TC-S Switch

Cisco Catalyst 2960-Plus 48PST-L Switch

Cisco Catalyst 2960-Plus 48PST-S Switch

Cisco Catalyst 2960-Plus 48TC-L Switch

Cisco Catalyst 2960-Plus 48TC-S Switch

Cisco Catalyst 2960C-12PC-L Switch

Cisco Catalyst 2960C-8PC-L Switch

Cisco Catalyst 2960C-8TC-L Switch

Cisco Catalyst 2960C-8TC-S Switch

Cisco Catalyst 2960CG-8TC-L Compact Switch

Cisco Catalyst 2960CPD-8PT-L Switch

Cisco Catalyst 2960CPD-8TT-L Switch

Cisco Catalyst 2960CX-8PC-L Switch

Cisco Catalyst 2960CX-8TC-L Switch

Cisco Catalyst 2960G-24TC-L Switch

Cisco Catalyst 2960G-48TC-L Switch

Cisco Catalyst 2960G-8TC-L Compact Switch

Cisco Catalyst 2960L-16PS-LL Switch

Cisco Catalyst 2960L-16TS-LL Switch

Cisco Catalyst 2960L-24PS-LL Switch

Cisco Catalyst 2960L-24TS-LL Switch

Cisco Catalyst 2960L-48PS-LL Switch

Cisco Catalyst 2960L-48TS-LL Switch

Cisco Catalyst 2960L-8PS-LL Switch

Cisco Catalyst 2960L-8TS-LL Switch

Cisco Catalyst 2960PD-8TT-L Compact Switch

Cisco Catalyst 2960S-24PD-L Switch

Cisco Catalyst 2960S-24PS-L Switch

Cisco Catalyst 2960S-24TD-L Switch

Cisco Catalyst 2960S-24TS-L Switch

Cisco Catalyst 2960S-24TS-S Switch

Cisco Catalyst 2960S-48FPD-L Switch

Cisco Catalyst 2960S-48FPS-L Switch

Cisco Catalyst 2960S-48LPD-L Switch

Cisco Catalyst 2960S-48LPS-L Switch

Cisco Catalyst 2960S-48TD-L Switch

Cisco Catalyst 2960S-48TS-L Switch

Cisco Catalyst 2960S-48TS-S Switch

Cisco Catalyst 2960S-F24PS-L Switch

Cisco Catalyst 2960S-F24TS-L Switch

Cisco Catalyst 2960S-F24TS-S Switch

Cisco Catalyst 2960S-F48FPS-L Switch

Cisco Catalyst 2960S-F48LPS-L Switch

Cisco Catalyst 2960S-F48TS-L Switch

Cisco Catalyst 2960S-F48TS-S Switch

Cisco Catalyst 2960X-24PD-L Switch

Cisco Catalyst 2960X-24PS-L Switch

Cisco Catalyst 2960X-24PSQ-L Cool Switch

Cisco Catalyst 2960X-24TD-L Switch

Cisco Catalyst 2960X-24TS-L Switch

Cisco Catalyst 2960X-24TS-LL Switch

Cisco Catalyst 2960X-48FPD-L Switch

Cisco Catalyst 2960X-48FPS-L Switch

Cisco Catalyst 2960X-48LPD-L Switch

Cisco Catalyst 2960X-48LPS-L Switch

Cisco Catalyst 2960X-48TD-L Switch

Cisco Catalyst 2960X-48TS-L Switch

Cisco Catalyst 2960X-48TS-LL Switch

Cisco Catalyst 2960XR-24PD-I Switch

Cisco Catalyst 2960XR-24PD-L Switch

Cisco Catalyst 2960XR-24PS-I Switch

Cisco Catalyst 2960XR-24PS-L Switch

Cisco Catalyst 2960XR-24TD-I Switch

Cisco Catalyst 2960XR-24TD-L Switch

Cisco Catalyst 2960XR-24TS-I Switch

Cisco Catalyst 2960XR-24TS-L Switch

Cisco Catalyst 2960XR-48FPD-I Switch

Cisco Catalyst 2960XR-48FPD-L Switch

Cisco Catalyst 2960XR-48FPS-I Switch

Cisco Catalyst 2960XR-48FPS-L Switch

Cisco Catalyst 2960XR-48LPD-I Switch

Cisco Catalyst 2960XR-48LPD-L Switch

Cisco Catalyst 2960XR-48LPS-I Switch

Cisco Catalyst 2960XR-48LPS-L Switch

Cisco Catalyst 2960XR-48TD-I Switch

Cisco Catalyst 2960XR-48TD-L Switch

Cisco Catalyst 2960XR-48TS-I Switch

Cisco Catalyst 2960XR-48TS-L Switch

Cisco Catalyst 2970G-24T Switch

Cisco Catalyst 2970G-24TS Switch

Cisco Catalyst 2975 Switch

Cisco Catalyst 3550 12G Switch

Cisco Catalyst 3550 12T Switch

Cisco Catalyst 3550 24 DC SMI Switch

Cisco Catalyst 3550 24 EMI Switch

Cisco Catalyst 3550 24 FX SMI Switch

Cisco Catalyst 3550 24 PWR Switch

Cisco Catalyst 3550 24 SMI Switch

Cisco Catalyst 3550 48 EMI Switch

Cisco Catalyst 3550 48 SMI Switch

Cisco Catalyst 3560-12PC-S Compact Switch

Cisco Catalyst 3560-24PS Switch

Cisco Catalyst 3560-24TS Switch

Cisco Catalyst 3560-48PS Switch

Cisco Catalyst 3560-48TS Switch

Cisco Catalyst 3560-8PC Compact Switch

Cisco Catalyst 3560C-12PC-S Switch

Cisco Catalyst 3560C-8PC-S Switch

Cisco Catalyst 3560CG-8PC-S Compact Switch

Cisco Catalyst 3560CG-8TC-S Compact Switch

Cisco Catalyst 3560CPD-8PT-S Compact Switch

Cisco Catalyst 3560CX-12PC-S Switch

Cisco Catalyst 3560CX-12PD-S Switch

Cisco Catalyst 3560CX-12TC-S Switch

Cisco Catalyst 3560CX-8PC-S Switch

Cisco Catalyst 3560CX-8PT-S Switch

Cisco Catalyst 3560CX-8TC-S Switch

Cisco Catalyst 3560CX-8XPD-S Switch

Cisco Catalyst 3560E-12D-E Switch

Cisco Catalyst 3560E-12D-S Switch

Cisco Catalyst 3560E-12SD-E Switch

Cisco Catalyst 3560E-12SD-S Switch

Cisco Catalyst 3560E-24PD-E Switch

Cisco Catalyst 3560E-24PD-S Switch

Cisco Catalyst 3560E-24TD-E Switch

Cisco Catalyst 3560E-24TD-S Switch

Cisco Catalyst 3560E-48PD-E Switch

Cisco Catalyst 3560E-48PD-EF Switch

Cisco Catalyst 3560E-48PD-S Switch

Cisco Catalyst 3560E-48PD-SF Switch

Cisco Catalyst 3560E-48TD-E Switch

Cisco Catalyst 3560E-48TD-S Switch

Cisco Catalyst 3560G-24PS Switch

Cisco Catalyst 3560G-24TS Switch

Cisco Catalyst 3560G-48PS Switch

Cisco Catalyst 3560G-48TS Switch

Cisco Catalyst 3560V2-24DC Switch

Cisco Catalyst 3560V2-24PS Switch

Cisco Catalyst 3560V2-24TS Switch

Cisco Catalyst 3560V2-48PS Switch

Cisco Catalyst 3560V2-48TS Switch

Cisco Catalyst 3560X-24P-E Switch

Cisco Catalyst 3560X-24P-L Switch

Cisco Catalyst 3560X-24P-S Switch

Cisco Catalyst 3560X-24T-E Switch

Cisco Catalyst 3560X-24T-L Switch

Cisco Catalyst 3560X-24T-S Switch

Cisco Catalyst 3560X-24U-E Switch

Cisco Catalyst 3560X-24U-L Switch

Cisco Catalyst 3560X-24U-S Switch

Cisco Catalyst 3560X-48P-E Switch

Cisco Catalyst 3560X-48P-L Switch

Cisco Catalyst 3560X-48P-S Switch

Cisco Catalyst 3560X-48PF-E Switch

Cisco Catalyst 3560X-48PF-L Switch

Cisco Catalyst 3560X-48PF-S Switch

Cisco Catalyst 3560X-48T-E Switch

Cisco Catalyst 3560X-48T-L Switch

Cisco Catalyst 3560X-48T-S Switch

Cisco Catalyst 3560X-48U-E Switch

Cisco Catalyst 3560X-48U-L Switch

Cisco Catalyst 3560X-48U-S Switch

Cisco Catalyst 3750 Metro 24-AC Switch

Cisco Catalyst 3750 Metro 24-DC Switch

Cisco Catalyst 3750-24FS Switch

Cisco Catalyst 3750-24PS Switch

Cisco Catalyst 3750-24TS Switch

Cisco Catalyst 3750-48PS Switch

Cisco Catalyst 3750-48TS Switch

Cisco Catalyst 3750E-24PD-E Switch

Cisco Catalyst 3750E-24PD-S Switch

Cisco Catalyst 3750E-24TD-E Switch

Cisco Catalyst 3750E-24TD-S Switch

Cisco Catalyst 3750E-48PD-E Switch

Cisco Catalyst 3750E-48PD-EF Switch

Cisco Catalyst 3750E-48PD-S Switch

Cisco Catalyst 3750E-48PD-SF Switch

Cisco Catalyst 3750E-48TD-E Switch

Cisco Catalyst 3750E-48TD-S Switch

Cisco Catalyst 3750G-12S Switch

Cisco Catalyst 3750G-12S-SD Switch

Cisco Catalyst 3750G-16TD Switch

Cisco Catalyst 3750G-24PS Switch

Cisco Catalyst 3750G-24T Switch

Cisco Catalyst 3750G-24TS Switch

Cisco Catalyst 3750G-24TS-1U Switch

Cisco Catalyst 3750G-48PS Switch

Cisco Catalyst 3750G-48TS Switch

Cisco Catalyst 3750V2-24FS Switch

Cisco Catalyst 3750V2-24PS Switch

Cisco Catalyst 3750V2-24TS Switch

Cisco Catalyst 3750V2-48PS Switch

Cisco Catalyst 3750V2-48TS Switch

Cisco Catalyst 3750X-12S-E Switch

Cisco Catalyst 3750X-12S-S Switch

Cisco Catalyst 3750X-24P-E Switch

Cisco Catalyst 3750X-24P-L Switch

Cisco Catalyst 3750X-24P-S Switch

Cisco Catalyst 3750X-24S-E Switch

Cisco Catalyst 3750X-24S-S Switch

Cisco Catalyst 3750X-24T-E Switch

Cisco Catalyst 3750X-24T-L Switch

Cisco Catalyst 3750X-24T-S Switch

Cisco Catalyst 3750X-24U-E Switch

Cisco Catalyst 3750X-24U-L Switch

Cisco Catalyst 3750X-24U-S Switch

Cisco Catalyst 3750X-48P-E Switch

Cisco Catalyst 3750X-48P-L Switch

Cisco Catalyst 3750X-48P-S Switch

Cisco Catalyst 3750X-48PF-E Switch

Cisco Catalyst 3750X-48PF-L Switch

Cisco Catalyst 3750X-48PF-S Switch

Cisco Catalyst 3750X-48T-E Switch

Cisco Catalyst 3750X-48T-L Switch

Cisco Catalyst 3750X-48T-S Switch

Cisco Catalyst 3750X-48U-E Switch

Cisco Catalyst 3750X-48U-L Switch

Cisco Catalyst 3750X-48U-S Switch

Cisco Catalyst 4000 Supervisor Engine I

Cisco Catalyst 4000/4500 Supervisor Engine IV

Cisco Catalyst 4000/4500 Supervisor Engine V

Cisco Catalyst 4500 Series Supervisor Engine II-Plus

Cisco Catalyst 4500 Series Supervisor Engine II-Plus-TS

Cisco Catalyst 4500 Series Supervisor Engine V-10GE

Cisco Catalyst 4500 Series Supervisor II-Plus-10GE

Cisco Catalyst 4500 Supervisor Engine 6-E

Cisco Catalyst 4500 Supervisor Engine 6L-E

Cisco Catalyst 4900M Switch

Cisco Catalyst 4928 10 Gigabit Ethernet Switch

Cisco Catalyst 4948 10 Gigabit Ethernet Switch

Cisco Catalyst 4948 Switch

Cisco Catalyst 4948E Ethernet Switch

Cisco Catalyst 4948E-F Ethernet Switch

Cisco Catalyst Blade Switch 3020 for HP

Cisco Catalyst Blade Switch 3030 for Dell

Cisco Catalyst Blade Switch 3032 for Dell M1000E

Cisco Catalyst Blade Switch 3040 for FSC

Cisco Catalyst Blade Switch 3120 for HP

Cisco Catalyst Blade Switch 3120X for HP

Cisco Catalyst Blade Switch 3130 for Dell M1000E

Cisco Catalyst C2928-24LT-C Switch

Cisco Catalyst C2928-48TC-C Switch

Cisco Catalyst Switch Module 3012 for IBM BladeCenter

Cisco Catalyst Switch Module 3110 for IBM BladeCenter

Cisco Catalyst Switch Module 3110X for IBM BladeCenter

Cisco Embedded Service 2020 24TC CON B Switch

Cisco Embedded Service 2020 24TC CON Switch

Cisco Embedded Service 2020 24TC NCP B Switch

Cisco Embedded Service 2020 24TC NCP Switch

Cisco Embedded Service 2020 CON B Switch

Cisco Embedded Service 2020 CON Switch

Cisco Embedded Service 2020 NCP B Switch

Cisco Embedded Service 2020 NCP Switch

Cisco Enhanced Layer 2 EtherSwitch Service Module

Cisco Enhanced Layer 2/3 EtherSwitch Service Module

Cisco Gigabit Ethernet Switch Module (CGESM) for HP

Cisco IE 2000-16PTC-G Industrial Ethernet Switch

Cisco IE 2000-16T67 Industrial Ethernet Switch

Cisco IE 2000-16T67P Industrial Ethernet Switch

Cisco IE 2000-16TC Industrial Ethernet Switch

Cisco IE 2000-16TC-G Industrial Ethernet Switch

Cisco IE 2000-16TC-G-E Industrial Ethernet Switch

Cisco IE 2000-16TC-G-N Industrial Ethernet Switch

Cisco IE 2000-16TC-G-X Industrial Ethernet Switch

Cisco IE 2000-24T67 Industrial Ethernet Switch

Cisco IE 2000-4S-TS-G Industrial Ethernet Switch

Cisco IE 2000-4T Industrial Ethernet Switch

Cisco IE 2000-4T-G Industrial Ethernet Switch

Cisco IE 2000-4TS Industrial Ethernet Switch

Cisco IE 2000-4TS-G Industrial Ethernet Switch

Cisco IE 2000-8T67 Industrial Ethernet Switch

Cisco IE 2000-8T67P Industrial Ethernet Switch

Cisco IE 2000-8TC Industrial Ethernet Switch

Cisco IE 2000-8TC-G Industrial Ethernet Switch

Cisco IE 2000-8TC-G-E Industrial Ethernet Switch

Cisco IE 2000-8TC-G-N Industrial Ethernet Switch

Cisco IE 3000-4TC Industrial Ethernet Switch

Cisco IE 3000-8TC Industrial Ethernet Switch

Cisco IE-3010-16S-8PC Industrial Ethernet Switch

Cisco IE-3010-24TC Industrial Ethernet Switch

Cisco IE-4000-16GT4G-E Industrial Ethernet Switch

Cisco IE-4000-16T4G-E Industrial Ethernet Switch

Cisco IE-4000-4GC4GP4G-E Industrial Ethernet Switch

Cisco IE-4000-4GS8GP4G-E Industrial Ethernet Switch

Cisco IE-4000-4S8P4G-E Industrial Ethernet Switch

Cisco IE-4000-4T4P4G-E Industrial Ethernet Switch

Cisco IE-4000-4TC4G-E Industrial Ethernet Switch

Cisco IE-4000-8GS4G-E Industrial Ethernet Switch

Cisco IE-4000-8GT4G-E Industrial Ethernet Switch

Cisco IE-4000-8GT8GP4G-E Industrial Ethernet Switch

Cisco IE-4000-8S4G-E Industrial Ethernet Switch

Cisco IE-4000-8T4G-E Industrial Ethernet Switch

Cisco IE-4010-16S12P Industrial Ethernet Switch

Cisco IE-4010-4S24P Industrial Ethernet Switch

Cisco IE-5000-12S12P-10G Industrial Ethernet Switch

Cisco IE-5000-16S12P Industrial Ethernet Switch

Cisco ME 4924-10GE Switch

Cisco RF Gateway 10

Cisco SM-X Layer 2/3 EtherSwitch Service Module

패치방법

Telnet연결 비활성화

(아직 패치 공개되지 않음)

참고 :

http://thehackernews.com/2017/03/cisco-network-switch-exploit.html

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp

https://www.krcert.or.kr/data/secNoticeView.do?bulletin_writing_sequence=25325