Cisco Releases Security Advisories for Multiple Products
Twelve advisories address one Critical, three High, and eight Medium impact vulnerabilities for Cisco routers, IP phones, and other software as well as hardware products.
Summary
Twelve advisories address one Critical, three High, and eight Medium impact vulnerabilities for Cisco routers, IP phones, and other software as well as hardware products.
Affected platforms
The following platforms are known to be affected:
The following platforms are also known to be affected:
- RV016 Multi-WAN VPN Routers
- RV042 Dual WAN VPN Routers
- RV042G Dual Gigabit WAN VPN Routers
- RV082 Dual WAN VPN Routers
- RV340 Dual WAN Gigabit VPN Routers
- RV340W Dual WAN Gigabit Wireless-AC VPN Routers
- RV345 Dual WAN Gigabit VPN Routers
- RV345P Dual WAN Gigabit POE VPN Routers
-
Cisco Industrial Network Director
-
Cisco BroadWorks Application Delivery Platform Device Management Software
-
Cisco BroadWorks Xtended Services Platform
-
Cisco TelePresence Collaboration Endpoint
-
Cisco CX Cloud Agent
-
Cisco Unified Intelligence Center
Threat details
Introduction
The twelve advisories address one Critical, three High, and eight Medium impact vulnerabilities in multiple products. The Critical advisory concerns arbitrary code execution and authentication bypass. The other advisories concern bypass of authentication as well as cross-site scripting, denial of service, server-side request forgery, and privilege escalation.
An unauthenticated, remote attacker could exploit some of these vulnerabilities to take control of a system.
Remediation advice
Affected organisations are encouraged to review the following Cisco Security Advisories for more information.
Remediation steps
Definitive source of threat updates
CVE Vulnerabilities
Last edited: 12 January 2023 3:35 pm