Cisco Releases Security Updates for Multiple Products
Cisco has released security updates to address two High and four Medium impact vulnerabilities for Cisco NX-OS, Cisco Nexus 9000 Series, Cisco APIC, and other products
Summary
Cisco has released security updates to address two High and four Medium impact vulnerabilities for Cisco NX-OS, Cisco Nexus 9000 Series, Cisco APIC, and other products
Affected platforms
The following platforms are known to be affected:
The following platforms are also known to be affected:
- Cisco Cloud Network Controller
- Cisco FXOS
- Cisco UCS Manager Software
- Cisco Nexus 9300-FX3 Series
Threat details
Introduction
Cisco has released security updates to address two High and four Medium impact vulnerabilities for Cisco NX-OS, Cisco Nexus 9000 Series, Cisco APIC, and other products. The High vulnerabilities, CVE-2023-20011 and CVE-2023-20089, are related to cross-site request forgery and denial-of-service. An unauthenticated, remote attacker could exploit some of these vulnerabilities to take control of a system.
Remediation advice
Affected organisations are encouraged to review the following Cisco Security Advisories for more information.
Remediation steps
| Type | Step |
|---|---|
| Patch |
Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability | cisco-sa-capic-csrfv-DMx6KSwV https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-capic-csrfv-DMx6KSwV |
| Patch |
Cisco Nexus 9000 Series Fabric Switches in ACI Mode Link Layer Discovery Protocol Memory Leak Denial of Service Vulnerability | cisco-sa-aci-lldp-dos-ySCNZOpX https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aci-lldp-dos-ySCNZOpX |
| Patch |
Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key Vulnerability | cisco-sa-aci-lldp-dos-ySCNZOpX https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucsm-bkpsky-H8FCQgsA |
| Patch |
Cisco NX-OS Software CLI Command Injection Vulnerability | cisco-sa-nxos-cli-cmdinject-euQVK9u https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cli-cmdinject-euQVK9u |
| Patch |
Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS Fabric Interconnects Command Injection Vulnerability | cisco-sa-nxfp-cmdinj-XXBZjtR https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxfp-cmdinj-XXBZjtR |
| Patch |
Cisco Nexus 9300-FX3 Series Fabric Extender for UCS Fabric Interconnects Authentication Bypass Vulnerability | cisco-sa-elyfex-dos-gfvcByx https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-elyfex-dos-gfvcByx |
| Guidance |
Cisco NX-OS Software SSH X.509v3 Certificate Authentication with Unsupported Remote Authorization Method Privilege Escalation Issues | cisco-sa-nxos-x509v3-unsupportedconfig-ScRtAbUk https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-x509v3-unsupportedconfig-ScRtAbUk |
CVE Vulnerabilities
Last edited: 24 February 2023 9:42 am