Cisco Releases Security Updates for Multiple Products

Threat ID:: CC-3804
Threat Severity:: Information only
Published:: 29 March 2021 11:00 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Affected platforms

The following platforms are known to be affected:

A wide range of Cisco products, please refer to advisories linked below for more information.

Threat details

Introduction

Cisco has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

Remediation advice

Organisations are encouraged to review the following Cisco Advisories and apply the necessary updates:

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021 cisco-sa-openssl-2021-GHY28dJd

Cisco Jabber Desktop and Mobile Client Software Vulnerabilities cisco-sa-cisco-jabber-PWrTATTC

Cisco IOS XE SD-WAN Software vDaemon Denial of Service Vulnerability cisco-sa-iosxe-sdwdos-4zeEeC9w

Cisco IOS XE SD-WAN Software Arbitrary Command Execution Vulnerability cisco-sa-iosxe-sdwarbcmdexec-sspOMUr3

Cisco IOS XE ROM Monitor Software for Cisco Industrial Switches OS Command Injection Vulnerability cisco-sa-iosxe-romvar-cmd-inj-N56fYbrw

Cisco IOS XE Software DECnet Phase IV/OSI Denial of Service Vulnerability cisco-sa-iosxe-decnet-dos-cuPWDkyL

Cisco IOS XE Software Web UI Cross-Site WebSocket Hijacking Vulnerability cisco-sa-iosxe-cswsh-FKk9AzT5

Cisco IOS XE SD-WAN Software vDaemon Buffer Overflow Vulnerability cisco-sa-iosxe-buffover-CqdRWLc

Cisco IOS XE Software Plug-and-Play Privilege Escalation Vulnerability cisco-sa-ios-xe-pnp-priv-esc-AmG3kuVL

Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability cisco-sa-ios-xe-iot-codexec-k46EFF6q

Cisco IOS XE Software Easy Virtual Switching System Arbitrary Code Execution Vulnerability cisco-sa-ios-xe-evss-code-exe-8cw5VSvw

Cisco IOS XE Software for the Catalyst 9000 Family Arbitrary Code Execution Vulnerability cisco-sa-ios-xe-cat-verify-BQ5hrXgH

Cisco IOS XE Software Fast Reload Vulnerabilities cisco-sa-fast-Zqr6DD5

Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family CAPWAP Denial of Service Vulnerability cisco-sa-ewlc-capwap-dos-2OA3JgKS

Cisco Access Point Software Arbitrary Code Execution Vulnerability cisco-sa-ap-privesc-wEVfp8Ud

Cisco IOS XE Software DNS NAT Protocol Application Layer Gateway Denial of Service Vulnerability cisco-sa-alg-dos-hbBS7SZE

Cisco Aironet Access Points FlexConnect Multicast DNS Denial of Service Vulnerability cisco-sa-aironet-mdns-dos-E6KwYuMx

Cisco Aironet Access Points FlexConnect Upgrade Information Disclosure Vulnerability cisco-sa-aironet-info-disc-BfWqghj

Cisco IOS and IOS XE Software Common Industrial Protocol Privilege Escalation Vulnerability cisco-sa-XE-SAP-OPLbze68

Cisco IOS XE Software Arbitrary Code Execution Vulnerability cisco-sa-XE-ACE-75K3bRWe

Last edited: 29 March 2021 11:01 am