Cisco Releases Security Updates

Threat ID:: CC-3631
Threat Severity:: Information only
Published:: 12 October 2020 12:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Affected platforms

The following platforms are known to be affected:

Versions: 2.7 prior to 2.7 Patch 2, 2.6 prior to 2.6 Patch 7, 2.5 prior to 2.6 Patch 7, 2.4 prior to 2.4 Patch 13, 2.3 prior to 2.4. Patch 13

Cisco ISE

Versions: 3.0.13464.0 through 3.0.16040.0

Cisco Webex Teams

The following platforms are also known to be affected:

Cisco 8000 series Video Surveillance IP cameras: all versions before Release 1.0.9-5

Threat details

Introduction

Cisco has released security updates to address critical- or high-severity vulnerabilities in Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

For updates addressing lower severity vulnerabilities please review the Cisco Security Advisories webpage.

Remediation advice

Affected organisations are encouraged to review the following Cisco security advisories and apply any relevant updates.

Remediation steps

Type	Step
Patch	Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execution and Denial of Service Vulnerability \| cisco-sa-cdp-rcedos-mAHR8vNx https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cdp-rcedos-mAHR8vNx
Patch	Cisco Identity Services Engine Authorisation Bypass Vulnerability \| cisco-sa-ise-auth-bypass-uJWqLTZM https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-auth-bypass-uJWqLTZM
Patch	Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability \| cisco-sa-webex-teams-dll-drsnH5AN https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-teams-dll-drsnH5AN

Last edited: 12 October 2020 11:22 am