Cisco Releases Security Updates for Multiple Products
Affected platforms
The following platforms are known to be affected:
Multiple Cisco products are affected including AnyConnect VPNs, DNA Center, and Firepower TDS.
Please refer to the below advisories for for more information.
Threat details
Introduction
Cisco has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
Remediation advice
Affected organisations are encouraged to review the following Cisco Advisories and apply the necessary updates or workarounds:
- Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation Vulnerability cisco-sa-esa-wsa-cert-vali-n8L97RW
- Cisco DNA Center Certificate Validation Vulnerability cisco-sa-dnac-certvalid-USEj2CZk
- Cisco Small Business 220 Series Smart Switches Vulnerabilities cisco-sa-ciscosb-multivulns-Wwyb7s5E
- Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability cisco-sa-anyconnect-pos-dll-ff8j6dFv
- Lasso SAML Implementation Vulnerability Affecting Cisco Products: June 2021 cisco-sa-lasso-saml-jun2021-DOXNRLkD
- Cisco Firepower Threat Defense Software SSL Decryption Policy Denial of Service Vulnerability cisco-sa-ftd-ssl-decrypt-dos-DdyLuK6c
Last edited: 18 June 2021 1:17 pm