Cisco Releases Security Updates for Multiple Products

Scheduled update addresses four High and six Medium impact vulnerabilities

Threat ID:: CC-4180
Threat Severity:: Information only
Published:: 4 October 2022 11:19 AM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Scheduled update addresses four High and six Medium impact vulnerabilities

Affected platforms

The following platforms are known to be affected:

Versions: AireOS Software with FIPS mode enabled.

Cisco Wireless LAN Controller

Versions: vBond Orchestrator Software, vEdge Cloud Routers, vEdge Routers, vManage Software, vSmart Controller Software

Cisco SD-WAN

Versions: If managed by a Catalyst 9800 Series Wireless Controller or Embedded Wireless Controller (EWC)

Cisco Catalyst 9100 Series Access Points

The following platforms are also known to be affected:

Cisco Duo for macOS
Standalone IOS XE SD-WAN Software
Cisco vManage
Cisco IOS XE ROMMON (Catalyst 3600 Series Switches, Catalyst 3800 Series Switches, Catalyst 9200 Series Switches, Catalyst 9300 Series Switches, Catalyst 9400 Series Switches, Catalyst 9500 Series Switches, Catalyst 9600 Series Switches)

Threat details

Introduction

Cisco has released nine security updates, addressing four High and six Medium vulnerabilities. The High impact vulnerabilities concern denial-of-service (DoS) and privilege escalation. An unauthenticated, remote attacker could exploit some of these vulnerabilities to take control of an affected system.

Remediation advice

Affected organisations are encouraged to review the following Cisco Security Advisories and apply the necessary updates.

Remediation steps

Type	Step
Patch	Cisco Wireless LAN Controller AireOS Software FIPS Mode Denial of Service Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-dos-mKGRrsCB
Patch	Cisco SD-WAN Software Privilege Escalation Vulnerabilities https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF
Patch	Cisco Catalyst 9100 Series Access Points Association Request Denial of Service Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-assoc-dos-EgVqtON8
Patch	Cisco SD-WAN Software Arbitrary File Corruption Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-cli-xkGwmqKu
Patch	Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-avc-NddSGB8
Patch	Cisco Software-Defined Application Visibility and Control on Cisco vManage Static Username and Password Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdavc-ZA5fpXX2
Patch	Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-info-disc-nrORXjO
Patch	Cisco Duo for macOS Authentication Bypass Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-macOS-bypass-uKZNpXE6
Patch	Cisco SD-WAN Arbitrary File Deletion Vulnerability https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-arb-file-delete-VB2rVcQv

Definitive source of threat updates

https://tools.cisco.com/security/center/publicationListing.x

CVE Vulnerabilities

Status Published

CVE-2022-20769

A vulnerability in the authentication functionality of Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error validation. An attacker could exploit this vulnerability by sending crafted packets to an affected device. A successful exploit could allow the attacker to cause the wireless LAN controller to crash, resulting in a DoS condition. Note: This vulnerability affects only devices that have Federal Information Processing Standards (FIPS) mode enabled.

Status Published

CVE-2022-20775

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.

Status Published

CVE-2022-20818

Status Published

CVE-2022-20945

A vulnerability in the 802.11 association frame validation of Cisco Catalyst 9100 Series Access Points (APs) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of certain parameters within association request frames received by the AP. An attacker could exploit this vulnerability by sending a crafted 802.11 association request to a nearby device. An exploit could allow the attacker to unexpectedly reload the device, resulting in a DoS condition.

Status Published

CVE-2022-20930

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite and possibly corrupt files on an affected system. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary commands that are executed as the root user account. A successful exploit could allow the attacker to overwrite arbitrary system files, which could result in a denial of service (DoS) condition.

Status Reserved

CVE-2022-20830

Status Published

CVE-2022-20844

A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC using a default static username and password combination. This vulnerability exists because the GUI is accessible on self-managed cloud installations or local server installations of Cisco vManage. An attacker could exploit this vulnerability by accessing the exposed GUI of Cisco SD-AVC. A successful exploit could allow the attacker to view managed device names, SD-AVC logs, and SD-AVC DNS server IP addresses.

Status Reserved

CVE-2022-20864

Status Published

CVE-2022-20662

A vulnerability in the smart card login authentication of Cisco Duo for macOS could allow an unauthenticated attacker with physical access to bypass authentication. This vulnerability exists because the assigned user of a smart card is not properly matched with the authenticating user. An attacker could exploit this vulnerability by configuring a smart card login to bypass Duo authentication. A successful exploit could allow the attacker to use any personal identity verification (PIV) smart card for authentication, even if the smart card is not assigned to the authenticating user.

Status Published

CVE-2022-20850

A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary file path information when using commands in the CLI of an affected device. A successful exploit could allow the attacker to delete arbitrary files from the file system of the affected device.

Last edited: 7 October 2022 10:37 am